Jacob Paullus 703070cbd1 registry: add tests for resident-length guards ...

Cover the GetValueData guard added in the previous commit with two
table-driven tests: the rejection path (dataLen ∈ {5, 8, 0xFF,
0x7FFFFFFF} with resident bit set) confirms the guard fires without
panicking and surfaces a helpful error; the happy path (dataLen ∈
{1, 2, 3, 4}) confirms the inline DataOffset bytes are returned
correctly so the guard didn't regress valid hives.

The matching guards in SetValueData (resident + non-resident write
paths) and enumSubKeys (riSig branch) require full NK/VK/sub-list
hive synthesis to exercise end-to-end; they're structurally identical
to the read-path guard and are validated by build/vet plus the lab
regression check on secretsdump. Worth a follow-up to extend the
synth helpers and cover them directly.

2026-05-11 23:54:22 -05:00

..

crypto.go

Initial commit

2026-04-17 14:20:41 -05:00

hive_test.go

registry: add tests for resident-length guards

2026-05-11 23:54:22 -05:00

hive.go

registry: harden hive parser against malformed inputs

2026-05-11 23:48:10 -05:00

sam.go

Initial commit

2026-04-17 14:20:41 -05:00

security.go

Initial commit

2026-04-17 14:20:41 -05:00

system.go

Initial commit

2026-04-17 14:20:41 -05:00