goblin
goblin copied to clipboard
m4b
An impish, cross-platform binary parsing crate, written in Rust
After landing PR #280, which provides parsing of elf symbol version information, I wanted to discuss about higher-level utility APIs that would cover common use-cases. In general I see the...
In the struct ```Rust Struct goblin::pe::import::SyntheticImportDirectoryEntry { ... } ``` The field `import_address_table` does not point to the IAT but instead points to the Import Name Table.
the layout of PE structs is pretty well documented, so it should be possible to turn PEs to and from bytes. If this is not completely possible, it should at...
I am trying to use `goblin` in a project to check the `e_type` of a binary file. I noticed that there are no `type` methods on the `Header` struct, but...
I wanted to share that I have just published a crate that implements support for Apple's code signatures: https://crates.io/crates/tugger-apple-codesign. I'm mentioning this in the goblin issue tracker because a) I...
Thank you for maintaining goblin. It is a joy being able to open binary files from any platform and analyze their contents without having to install a myriad of tools...
A bit of the history at https://github.com/gimli-rs/object/issues/154 and motivation at https://github.com/indygreg/PyOxidizer/pull/183 The default Python extension C flags on Windows with `cl.exe` includes [`/GL` (Whole Program Optimization)](https://docs.microsoft.com/en-us/cpp/build/reference/gl-whole-program-optimization?view=vs-2019). The docs say >...
Is there a reason `LC_BUILD_VERSION` isn't implemented yet? At first blush it seems straightforward and I'd be happy to work on making it happen.
The [code for `SectionHeader::is_relocation()`](https://docs.rs/goblin/0.3.0/src/goblin/elf/section_header.rs.html#484-486) checks for SHT_RELA but not SHT_REL: ```rust pub fn is_relocation(&self) -> bool { self.sh_type == SHT_RELA } ``` Apologies if this is some dark corner of...
When parsing the multiarray.so binary mentioned in #106, the NoteIterator appears to infinitely loop if we do something like: ```rust if let Some(notes) = self.elf.iter_note_headers(self.bytes) { fmt_hdr(fmt, "Notes")?; writeln!(fmt, "")?;...
