gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-02-04 11:07:53 -08:00
Code Issues Packages Projects Releases Wiki Activity

fetch section data by offset (not name)

Browse Source 
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
This commit is contained in:
Yacine Elhamer
2023-06-01 11:46:39 +01:00
committed by GitHub
parent ffb1cb3128
commit ab089c024d
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
capa/features/extractors/viv/insn.py
View File

@@ -134,8 +134,8 @@ def extract_insn_api_features(fh: FunctionHandle, bb, ih: InsnHandle) -> Iterato
for section in elf.sections:
if section.sh_info & SHT_SYMTAB:
strtab_section = elf.sections[section.vsGetField("sh_link")]
sh_symtab = Shdr.from_viv(section, elf.getSectionBytes(section.name))
sh_strtab = Shdr.from_viv(strtab, elf.getSectionBytes(strtab.name))
sh_symtab = Shdr.from_viv(section, elf.readAtOffset(section.sh_offset, section.sh_size))
sh_strtab = Shdr.from_viv(strtab, elf.readAtOffset(strtab.sh_offset, strtab.sh_size))
symtab = SymTab(endian, bitness, sh_symtab, sh_strtab)
f.vw.metadata["SymbolTable"] = symtab