gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-02-04 19:12:01 -08:00
Code Issues Packages Projects Releases Wiki Activity

dnfile: return NO_ADDRESS for base_address

Browse Source
This commit is contained in:
William Ballenthin
2022-06-14 17:43:04 -06:00
parent 6b5e125592
commit af9049da6e
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
capa/features/extractors/dnfile/extractor.py
View File

@@ -17,7 +17,7 @@ import capa.features.extractors
import capa.features.extractors.dnfile.file
import capa.features.extractors.dnfile.insn
from capa.features.common import Feature
from capa.features.address import Address, DNTokenAddress, DNTokenOffsetAddress, AbsoluteVirtualAddress
from capa.features.address import NO_ADDRESS, Address, DNTokenAddress, DNTokenOffsetAddress, AbsoluteVirtualAddress
from capa.features.extractors.base_extractor import BBHandle, InsnHandle, FunctionHandle, FeatureExtractor
from capa.features.extractors.dnfile.helpers import get_dotnet_managed_method_bodies
@@ -33,7 +33,7 @@ class DnfileFeatureExtractor(FeatureExtractor):
self.global_features.extend(capa.features.extractors.dotnetfile.extract_file_arch(pe=self.pe))
def get_base_address(self):
return AbsoluteVirtualAddress(0x0)
return NO_ADDRESS
def extract_global_features(self):
yield from self.global_features

2
capa/features/extractors/dotnetfile.py
View File

@@ -152,7 +152,7 @@ class DotnetFileFeatureExtractor(FeatureExtractor):
self.pe: dnfile.dnPE = dnfile.dnPE(path)
def get_base_address(self):
return AbsoluteVirtualAddress(0x0)
return NO_ADDRESS
def get_entry_point(self) -> int:
# self.pe.net.Flags.CLT_NATIVE_ENTRYPOINT