{"action":"created","issue":{"url":"https://api.github.com/repos/anarchivist/homebrew-forensics/issues/2","labels_url":"https://api.github.com/repos/anarchivist/homebrew-forensics/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/anarchivist/homebrew-forensics/issues/2/comments","events_url":"https://api.github.com/repos/anarchivist/homebrew-forensics/issues/2/events","html_url":"https://github.com/anarchivist/homebrew-forensics/issues/2","id":106681797,"number":2,"title":"Possibly add hivexsh?","user":{"login":"Mike724","id":977113,"avatar_url":"https://avatars.githubusercontent.com/u/977113?v=3","gravatar_id":"","url":"https://api.github.com/users/Mike724","html_url":"https://github.com/Mike724","followers_url":"https://api.github.com/users/Mike724/followers","following_url":"https://api.github.com/users/Mike724/following{/other_user}","gists_url":"https://api.github.com/users/Mike724/gists{/gist_id}","starred_url":"https://api.github.com/users/Mike724/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Mike724/subscriptions","organizations_url":"https://api.github.com/users/Mike724/orgs","repos_url":"https://api.github.com/users/Mike724/repos","events_url":"https://api.github.com/users/Mike724/events{/privacy}","received_events_url":"https://api.github.com/users/Mike724/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-09-16T01:59:03Z","updated_at":"2015-09-17T04:06:32Z","closed_at":null,"body":"First off, thank you for making this formula! One tool I use a lot is hivexsh, which is very similar to hivexregedit, but with an interactive prompt. On debian based systems it is in the \"libhivex-bin\" package, and I'd love to have it on OS X. I've tried building the package myself, but just can't seem to get it working. \r\n\r\nI assume you know a bit more about building hivex than me, and was wondering if you could add hivexsh in?"},"comment":{"url":"https://api.github.com/repos/anarchivist/homebrew-forensics/issues/comments/140964829","html_url":"https://github.com/anarchivist/homebrew-forensics/issues/2#issuecomment-140964829","issue_url":"https://api.github.com/repos/anarchivist/homebrew-forensics/issues/2","id":140964829,"user":{"login":"anarchivist","id":73732,"avatar_url":"https://avatars.githubusercontent.com/u/73732?v=3","gravatar_id":"","url":"https://api.github.com/users/anarchivist","html_url":"https://github.com/anarchivist","followers_url":"https://api.github.com/users/anarchivist/followers","following_url":"https://api.github.com/users/anarchivist/following{/other_user}","gists_url":"https://api.github.com/users/anarchivist/gists{/gist_id}","starred_url":"https://api.github.com/users/anarchivist/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/anarchivist/subscriptions","organizations_url":"https://api.github.com/users/anarchivist/orgs","repos_url":"https://api.github.com/users/anarchivist/repos","events_url":"https://api.github.com/users/anarchivist/events{/privacy}","received_events_url":"https://api.github.com/users/anarchivist/received_events","type":"User","site_admin":false},"created_at":"2015-09-17T04:06:32Z","updated_at":"2015-09-17T04:06:32Z","body":"Hi there - I'd be happy to add `hivexsh`, which is included in the source distribution for `hivex`. `hivexsh` builds seem to be blocked by default because of OS X lacking `open_memstream`, as described [here](https://www.redhat.com/archives/libguestfs/2011-September/msg00069.html). The other issue I'm seeing is a dependency on `libreadline`, but that's easy enough to fix.\r\n\r\nThere was a [thread on the `libguestfs` mailing list from 2013](https://www.redhat.com/archives/libguestfs/2013-October/msg00042.html) that walks through what would be necessary to get `libguestfs` to build. I think the salient part for `hivexsh` is here:\r\n\r\n```\r\n- gnulib/lib/open_memstream.c: add new file, from patch at http://lists.gnu.org/archive/html/bug-gnulib/2010-04/msg00379.html, remove from it check for #if !HAVE_FUNOPEN (it exists on Mac OSX, but HAVE_FUNOPEN is not defined)\r\n- gnulib/lib/stdio.in.h: add somewhere (for example, before #if @GNULIB_PCLOSE@): _GL_FUNCDECL_SYS (open_memstream, FILE *, (char **, size_t *));\r\n- gnulib/lib/Makefile.in, replace: openat-die.lo -> open_memstream.lo openat-die.lo\r\n- gnulib/lib/Makefile.in, replace: openat-die.c -> open_memstream.c openat-die.c\r\n[ Note: Mac OS X lacks open_memstream and gnulib doesn't supply it. Note that open_memstream is part of POSIX, so this is a bug in OS X ]\r\n```\r\n\r\nI'm not actively working with forensics tools at the moment, so I have limited time to work on this, but I'll see what I can do."}}