From 69d44cdc1670148339052a7fa70178b2c69e5a14 Mon Sep 17 00:00:00 2001 From: Yacine Elhamer Date: Sat, 22 Apr 2023 01:09:04 +0100 Subject: [PATCH] _parse(): fix section header unpacking field size --- capa/features/extractors/elf.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/capa/features/extractors/elf.py b/capa/features/extractors/elf.py index e0dc596c..fd0087ef 100644 --- a/capa/features/extractors/elf.py +++ b/capa/features/extractors/elf.py @@ -658,7 +658,7 @@ class SymTab: ) elif bitness == 64: name_offset, info, other, shndx, value, size = struct.unpack_from( - endian + "IBBBQQ", symtab_buf, i * self.symtab.entsize + endian + "IBBhQQ", symtab_buf, i * self.symtab.entsize ) self.symbols.append(Symbol(name_offset, value, size, info, other, shndx))