Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix IAT Reconstruction #528

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Commits on Jan 19, 2021

  1. fix IAT reconstruction

    section_from_offset(original_import_offset) can return the previous section of original import section, so use this->binary_->section_from_offset((*original_import_section)->pointerto_raw_data()) where original_import_section is corresponding to the original import section. To obtain original_import_section after adding the new import section, we introduce PE_SECTION_TYPES::OLD_IMPORT type. This type is just used to mark the original import section.
    Catminusminus committed Jan 19, 2021
    Configuration menu
    Copy the full SHA
    3540e77 View commit details
    Browse the repository at this point in the history
  2. add a fallback mechanism

    We use section_from_offset(offset_imports) as the original import section if no section has OLD_IMPORT type.
    Catminusminus committed Jan 19, 2021
    Configuration menu
    Copy the full SHA
    6b03898 View commit details
    Browse the repository at this point in the history