LIEF

LIEF copied to clipboard

**Is your feature request related to a problem? Please describe.** The OAT file version 199 does not detect DEX files inside the ELF file **Additional context** https://transfer.sh/wcqO6o/boot.img ```sh [18:50 edu@xps...

enovella

Builder results as string/list of bytes

1

**Is your feature request related to a problem? Please describe.** I would need to obtain the results of the builder directly in memory and not storing it into a file...

zangobot

MachO: Google Chrome 97.0.4692.71 Lief version: v0.11.5 MacOS M1 Code: ``` void inject() { std::unique_ptr binaries{LIEF::MachO::Parser::parse("/Users/jasonlee/Desktop/Google Chrome 2")}; const std::string new_lib ("/usr/local/lib/libHook.dylib"); for (LIEF::MachO::Binary& binary : *binaries) { binary.remove_signature(); binary.add_library(new_lib);...

1021811501

**Describe the bug** I have a .o file generated within a .a MachO static library, with lief, I cannot get __Text segment from object file, while with MachoView the .o...

xiangqianli

Fix IAT Reconstruction

2

This will be fix #523 Currently, `this->binary_->section_from_offset(offset_imports)` is used as the original import section. However, if the "backward shift" (explained in #523 ) happens, this returns the previous section of...

Catminusminus

[PE] Delete existing resource table when building a new one

1

Working on #276. Remaining work: replace section extension by offset shifting.

DaLynX

Fix build_imports

1

Hi This pull request fixes the issue (#517). The current implementation of `build_import_table` does not check the correspondence between the imported functions and the trampolines. So, if we add an...

kohnakagawa

add section in ELF file : unexpected section size

7

**Describe the bug** I'm trying to add a binary as a section in an existing elf file. my code is ``` def main(): logging.basicConfig() logger = logging.getLogger(os.path.basename(__file__)) elffile = lief.parse("input.elf")...

arnopo

Missing signers in 2a84e6d95753c01725ce5e472aaec03b3001d81760aa88f8f393047fc7e55958

2

**Describe the bug** Analyzing sample 2a84e6d95753c01725ce5e472aaec03b3001d81760aa88f8f393047fc7e55958 gives us a single signature with a single signer. Looking at the details of the file in Windows gives us 3 signers (I believe...

gdesmar

Cannot add section and rebuild PE on Windows 10

12

Rebuilding a binary after adding a section on Windows 10 doesn't seem to produce a valid PE file. **Steps to reproduce:** 1. Verify that parsing + rebuilding a PE without...

stevielavern