Changeset 85

Show
Ignore:
Timestamp:
12/08/06 04:32:16 (2 years ago)
Author:
kindlund
Message:

Additional debugging enabled; fixed slight registry parsing issue (one letter key/values that contain an escaped backslash).

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • honeyclient/branches/bug/42/etc/honeyclient_log.conf

    r70 r85  
    5959####################################################################### 
    6060 
    61 log4perl.rootLogger=INFO, Screen 
     61log4perl.rootLogger=DEBUG, Screen 
    6262log4perl.appender.Screen=Log::Log4perl::Appender::Screen 
    6363# If you want colorized logging to the screen, enable this line, instead. 
    6464#log4perl.appender.Screen=Log::Log4perl::Appender::ScreenColoredLevels 
    6565log4perl.appender.Screen.stderr=0 
    66 log4perl.appender.Screen.Threshold=INFO 
     66log4perl.appender.Screen.Threshold=DEBUG 
    6767log4perl.appender.Screen.layout=Log::Log4perl::Layout::PatternLayout 
    6868log4perl.appender.Screen.layout.ConversionPattern=%d{yyyy-MM-dd HH:mm:ss} %5p [%M] (%F:%L) - %m%n 

  • honeyclient/branches/bug/42/lib/HoneyClient/Agent/Integrity/Registry.yp

    r84 r85  
    5050#           print "Directory: " . $_[1] . " - " . $pos . "\n"; 
    5151            $group->{key} = $_[1]; 
    52 #           print Dumper($group) . "\n"; 
     52           #print Dumper($group) . "\n"; 
    5353            $group = { }; 
    5454        } 
    …… 
    5757#           print "Directory: " . $_[1] . " - " . $pos . "\n"; 
    5858            $group->{key} = $_[1]; 
    59 #           print Dumper($group) . "\n"; 
     59           #print Dumper($group) . "\n"; 
    6060            $group = { }; 
    6161        } 
    …… 
    122122 
    123123            # Identify KEY_NAME token. 
    124             if ($_[0]->YYData->{DATA} =~ m/\G\"(|.*[^\\]|.*(?:\\[^\\]|\\\\|[^\\][^\\]))\"(?==)/cg) { 
     124            if ($_[0]->YYData->{DATA} =~ m/\G\"(|[^\\]|.*(?:\\[^\\]|\\\\|[^\\][^\\]))\"(?==)/cg) { 
    125125                $inValue = 1; 
    126126                return ("KEY_NAME", $1); 
    …… 
    136136 
    137137            # Identify string KEY_VALUE token. 
    138             if ($_[0]->YYData->{DATA} =~ m/\G=\"(|.*?[^\\]|.*?(?:\\[^\\]|\\\\|[^\\][^\\]))\"\n/cgs) { 
     138            if ($_[0]->YYData->{DATA} =~ m/\G=\"(|[^\\]|.*?(?:\\[^\\]|\\\\|[^\\][^\\]))\"\n/cgs) { 
    139139                $inValue = 0; 
    140140                return ("KEY_VALUE", $1);