[or-cvs] r15812: Do not dump registry keys we have already read (torbrowser/trunk/src/FindTraces)

[sjm217 at seul.org]

Author: sjm217
Date: 2008-07-09 16:40:10 -0400 (Wed, 09 Jul 2008)
New Revision: 15812

Modified:
   torbrowser/trunk/src/FindTraces/dumpreg.py
Log:
Do not dump registry keys we have already read

Modified: torbrowser/trunk/src/FindTraces/dumpreg.py
===================================================================
--- torbrowser/trunk/src/FindTraces/dumpreg.py	2008-07-09 20:39:30 UTC (rev 15811)
+++ torbrowser/trunk/src/FindTraces/dumpreg.py	2008-07-09 20:40:10 UTC (rev 15812)
@@ -57,13 +57,19 @@
 		
 	## Skip header
 	logfile.next()
-
+
+	keys = {}
 	for row in logfile:
 		## Parse the line
 		seq, time, proc, pid, op, key, result, detail = row
 		## We only handle RegCreateKey operations
-		assert(op=='RegCreateKey')
-		## Parse the registry key
+		assert(op.startswith('Reg'))
+
+		if keys.has_key(key):
+			continue
+		keys[key] = None
+		
+		## Parse the registry key		
 		handle, path = parse_key(key)
 		try:
 			## Get the contents