gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-01-03 08:18:26 -08:00
Code Issues Packages Projects Releases Wiki Activity

insn.py: Update extract_insn_api_features() to optimize by means of viv rather than function attributes

Browse Source
This commit is contained in:
Yacine Elhamer
2023-04-25 08:42:53 +01:00
parent ee881ab82f
commit 695508aa4c
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
capa/features/extractors/viv/insn.py
View File

@@ -123,7 +123,7 @@ def extract_insn_api_features(fh: FunctionHandle, bb, ih: InsnHandle) -> Iterato
return
if f.vw.metadata["Format"] == "elf":
if not hasattr(extract_insn_api_features, "symtab"):
if "SymbolTable" not in f.vw.metadata:
# the symbol table gets stored as a function's attribute in order to avoid running
# this code everytime the call is made, thus preventing the computational overhead.
elf = f.vw.parsedbin
@@ -138,9 +138,9 @@ def extract_insn_api_features(fh: FunctionHandle, bb, ih: InsnHandle) -> Iterato
sh_strtab = Shdr.from_viv(strtab, elf.getSectionBytes(strtab.name))
symtab = SymTab(endian, bitness, sh_symtab, sh_strtab)
extract_insn_api_features.symtab = symtab
f.vw.metadata["SymbolTable"] = symtab
symtab = extract_insn_api_features.symtab
symtab = f.vw.metadata["SymbolTable"]
for symbol in symtab.get_symbols():
sym_name = symtab.get_name(symbol)
sym_value = symbol.value