PESecurity icon indicating copy to clipboard operation
PESecurity copied to clipboard

SafeSEH reported False for resource-only DLLs

Open imag0r opened this issue 6 years ago • 1 comments

SafeSEH is reported False for resource-only DLLs. While it is technically valid, it just generates a noise in the reports as this can't be 'fixed' in the DLL itself. Resource-only DLLs contain no code, so they can't have safe Structured Exception Handlers. PESecurity could skip such DLLs by checking whether they have non-0 entry point. More info: https://docs.microsoft.com/en-us/cpp/build/creating-a-resource-only-dll?view=vs-2017

imag0r avatar Nov 09 '18 21:11 imag0r

Thanks for the info. I'll take a look and write up a patch to skip those.

egru avatar Dec 07 '18 17:12 egru