Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot parse loaded image due to rigidity around parsing Attribute Certificates #376

Closed
suttonbradley opened this issue Aug 24, 2023 · 0 comments · Fixed by #377
Closed

Comments

@suttonbradley
Copy link
Contributor

suttonbradley commented Aug 24, 2023

Currently, there is no option to skip parsing of attribute certificates, which prevents parsing loaded images because the loader does not include these certificates (just before "Section Data"). Per the linked docs:

Another exception is that attribute certificate and debug information must be placed at the very end of an image file, with the attribute certificate table immediately preceding the debug section, because the loader does not map these into memory.

Related: #312. I thought that issue was too general for this concern, so I made a new one. I haven't run into issues with the address resolution -- I'm using the resolve_rva field of ParseOptions to deal with that; however, forced parsing of the attribute certificate table is blocking for the emulation-based fuzzing project I work on, where we need to parse PEs straight from their in-memory representation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant