search

omerbenamram / evtx

A Fast (and safe) parser for the Windows XML Event Log (EVTX) format
Apache License 2.0
625 stars 61 forks source link

wrong ordering in records returned by records() iterator #237

Open valerino opened 1 year ago

valerino commented 1 year ago

hi, i think there is a bug in event parsing regarding ordering. the records() iterator return records appended in this way:

chunk0: record10,record9,record8,record7,record6,record5,record4,record3,record2,record1 chunk1: record20,record19,record18,record17,record16,record15,record14,record13,record12,record11 and so on ...

basically, each chunk is orderered in a descending way, and this leads to the records not being in the original order when pulled from the iterator. and this may break some utilization of your lib where the original order needs to be preserved.

valerino commented 1 year ago

closing and reopened in pyevtx-rs repo: https://github.com/omerbenamram/pyevtx-rs/issues/25