[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Bug binutils/21546] New: [objdump] Support PE EXE/DLL Import Tables wit
From: |
bonniot at gmail dot com |
Subject: |
[Bug binutils/21546] New: [objdump] Support PE EXE/DLL Import Tables with zero in Hint Table |
Date: |
Mon, 05 Jun 2017 09:10:54 +0000 |
https://sourceware.org/bugzilla/show_bug.cgi?id=21546
Bug ID: 21546
Summary: [objdump] Support PE EXE/DLL Import Tables with zero
in Hint Table
Product: binutils
Version: unspecified
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: binutils
Assignee: unassigned at sourceware dot org
Reporter: bonniot at gmail dot com
Target Milestone: ---
Some PE files have value 00000000 for the Hint Table in the Import Tables. This
has already been reported in
https://lists.gnu.org/archive/html/bug-binutils/2004-07/msg00039.html
This can be reproduced for instance with the GoogleTranslateAPI.dll from
https://sourceforge.net/projects/agoogletranslat/
Example output from objdump -p GoogleTranslateAPI.dll:
The Import Tables (interpreted .rsrc section contents)
vma: Hint Time Forward DLL First
Table Stamp Chain Name Thunk
0009aa14 00000000 00000000 00000000 0009aae0 0009aaa0
DLL Name: KERNEL32.DLL
0009aa28 00000000 00000000 00000000 0009aaed 0009aab8
It seems the correct interpretation in that case is to use the First Thunk
value instead. I'll attach a patch that does that. The output becomes:
The Import Tables (interpreted .rsrc section contents)
vma: Hint Time Forward DLL First
Table Stamp Chain Name Thunk
0009aa14 00000000 00000000 00000000 0009aae0 0009aaa0
DLL Name: KERNEL32.DLL
vma: Hint/Ord Member-Name Bound-To
9ab28 0 LoadLibraryA
9ab36 0 GetProcAddress
9ab46 0 VirtualProtect
9ab56 0 VirtualAlloc
9ab64 0 VirtualFree
0009aa28 00000000 00000000 00000000 0009aaed 0009aab8
--
You are receiving this mail because:
You are on the CC list for the bug.
- [Bug binutils/21546] New: [objdump] Support PE EXE/DLL Import Tables with zero in Hint Table,
bonniot at gmail dot com <=