[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Misinterpretation of PE export address table entries

From: Nick Clifton
Subject: Re: Misinterpretation of PE export address table entries
Date: Fri, 29 Jul 2005 15:13:49 +0100
User-agent: Mozilla Thunderbird 1.0 (X11/20041206)

Hi Pavel,

pe_print_edata() thinks the RVA is a forwarder when it points between the start of export tables (from the data dictionary) and the end of the *whole section* containing the tables. This is wrong. It should use the length in the data directory to determine the end of area occupied by export tables.

See the attached patch.

Thanks for the patch. I think that it is small enough to be considered as obvious and so not need a copyright assignment. Thus I have applied it together with this ChangeLog entry:

2005-07-29  Pavel Kankovsky  <address@hidden>

        * peXXigen.c (pe_print_edata): Compute the size of the export
        table from the size field in the DataDictionary and not the size
        of the section.  Some linkers embed the export table inside a
        larger section.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]