gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-02-04 19:12:01 -08:00
Code Issues Packages Projects Releases Wiki Activity

properly set bounds for find_byte_sequence (#1757)

Browse Source
This commit is contained in:
Colton Gabertan
2023-08-23 14:40:15 -07:00
committed by GitHub
parent 19b8000c00
commit 70d36ab640
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
capa/features/extractors/ghidra/helpers.py
View File

@@ -8,6 +8,7 @@
from typing import Dict, List, Iterator
import ghidra
import java.lang
from ghidra.program.model.lang import OperandType
from ghidra.program.model.block import BasicBlockModel, SimpleBlockIterator
from ghidra.program.model.symbol import SourceType, SymbolType
@@ -36,7 +37,7 @@ def find_byte_sequence(seq: bytes) -> Iterator[int]:
"""
seqstr = "".join([f"\\x{b:02x}" for b in seq])
# .add(1) to avoid false positives on regular PE files
eas = findBytes(currentProgram().getMinAddress().add(1), seqstr, 1, 1) # type: ignore [name-defined] # noqa: F821
eas = findBytes(currentProgram().getMinAddress().add(1), seqstr, java.lang.Integer.MAX_VALUE, 1) # type: ignore [name-defined] # noqa: F821
yield from eas