Magic-Mirror/radare2
1
0
Fork 0
mirror of https://github.com/radareorg/radare2.git synced 2024-12-03 10:51:01 +00:00
Code Issues Actions 7 Packages Projects Releases Wiki Activity

Find strings in more sections for PE binaries

Browse Source
This commit is contained in:
pancake 2016-04-05 13:30:10 +02:00
parent 7708ab0fc9
commit c834239830
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
libr/bin/bin.c
View File

@ -277,8 +277,13 @@ static int is_data_section(RBinFile *a, RBinSection *s) {
return true;
#define X 1
#define ROW (4 | 2)
/* probably too much false positives in here, or thats fine? */
if (strstr (o->info->bclass, "PE") && s->srwx & ROW && !(s->srwx & X) && s->size > 0) {
if (!strcmp (s->name, ".rdata")) // Maybe other sections are interesting too?
if (!strcmp (s->name, ".rsrc"))
return true;
if (!strcmp (s->name, ".data"))
return true;
if (!strcmp (s->name, ".rdata"))
return true;
}
}