VirusTotal/yara
1
0
Fork 0
mirror of https://github.com/VirusTotal/yara.git synced 2026-10-12 02:10:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix wrong endianness conversion.

Browse Source 
section->flags is 64bit or 32bit for ELF64 and ELF32 files respectively. Different endianness conversion functions must be called for each case.
This commit is contained in:
plusvic
2017-05-05 19:13:36 +02:00
parent 74a4d95a2c
commit dc503542ae
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
libyara/modules/elf.c
+1 -1
View File
@@ -220,7 +220,7 @@ void parse_elf_header_##bits##_##bo( \
{ \
set_integer(yr_##bo##32toh(section->type), elf_obj, \
"sections[%i].type", i); \
set_integer(yr_##bo##32toh(section->flags), elf_obj, \
set_integer(yr_##bo##bits##toh(section->flags), elf_obj, \
"sections[%i].flags", i); \
set_integer(yr_##bo##bits##toh(section->addr), elf_obj, \
"sections[%i].address", i); \