Wesley Shields ec5c49eaff Make resource parsing more resilient. ...

I have a UPX packed sample that corrupted the resource directory. These changes
allow the resources to be properly parsed.

They add an RVA and size to the resource struct. This is the address and size
of the resource as it is declared in the directory. If the address is invalid
create a zero-length buffer for the data. If the size is invalid (ie: it goes
off the end of the .rsrc section) create a zero-length buffer for the data.
Otherwise, return the actual data.

This allows consumers of the rsrc to figure out if the resource is corrupt
or not by comparing the length of the buffer to the size element. If the
size is greater than 0 but buffer is empty then it's invalid.

Also, it should never happen but just to be safe make pepy catch NULL
buffers (in pepy_data_converter) and return an empty bytearray.

2013-12-30 16:45:50 -05:00

..

buffer.cpp

.

2013-11-11 15:09:57 -05:00

CMakeLists.txt

.

2013-11-11 15:09:57 -05:00

nt-headers.h

Fix resource parsing so it works. ;)

2013-12-25 21:01:55 -05:00

parse.cpp

Make resource parsing more resilient.

2013-12-30 16:45:50 -05:00

parse.h

Make resource parsing more resilient.

2013-12-30 16:45:50 -05:00

to_string.h

.

2013-11-22 19:28:04 -05:00