gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-02-04 11:07:53 -08:00
Code Issues Packages Projects Releases Wiki Activity

black

Browse Source
This commit is contained in:
William Ballenthin
2022-01-13 15:24:58 -07:00
parent 93355a6884
commit b392b48b28
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
capa/features/extractors/elf.py
View File

@@ -250,13 +250,13 @@ def detect_elf_os(f: BinaryIO) -> str:
for i in range(e_shnum):
offset = i * e_shentsize
shent = section_headers[offset : offset + e_shentsize]
if bitness == 32:
sh_name, sh_type, _, sh_addr, sh_offset, sh_size = struct.unpack_from(endian + "IIIIII", shent, 0x0)
elif bitness == 64:
sh_name, sh_type, _, sh_addr, sh_offset, sh_size = struct.unpack_from(endian + "IIQQQQ", shent, 0x0)
else:
raise NotImplementedError()
raise NotImplementedError()
SHT_NOTE = 0x7
if sh_type != SHT_NOTE:
@@ -278,7 +278,7 @@ def detect_elf_os(f: BinaryIO) -> str:
name = note[name_offset : name_offset + namesz].partition(b"\x00")[0].decode("ascii")
logger.debug("name: %s", name)
if name == "Linux":
logger.debug("note owner: %s", "LINUX")
ret = OS.LINUX if not ret else ret