New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
debug/pe: ImportedSymbols returns no symbols #16103
Comments
I would be happy to prepare a CL for this, if you haven't started already @alexbrainman. |
Please go ahead, if you like. I am fighting with symlinks at this moment :-). Alex |
Hi Alex, Thanks for the heads up. I'll try to tackle it sometime next week. Good luck in your battle with the symlinks : ) Cheers /u |
@mewmew, any update? @alexbrainman, can you remilestone this to Go 1.10 if this isn't important for Go 1.9? You decide. |
I have this mostly working in a local PE parser, which may be cleaned up and adapted for inclusion to the debug/pe package timed for the 1.10 release. I will try to prepare a CL within the following month. Cheers /u |
You already remilestoned it yourself. Thank you, Brad. Alex |
Change https://golang.org/cl/110555 mentions this issue: |
Change https://golang.org/cl/151480 mentions this issue: |
Apparently (see #27904 (comment) for details) kernel32.dll file is not present on windows/arm, so use ws2_32.dll instead. ws2_32.dll imports table also lives in '.rdata' section, so ws2_32.dll is as good as kernel32.dll for testing issue #16103. Updates #27904 Change-Id: Ibc72b24eea9a4d85abd371ffdcf00442e711b745 Reviewed-on: https://go-review.googlesource.com/c/151480 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
Running this program:
with PsService.zip file as argument, lists no imported dlls / functions. But it should:
The reason for this is because debug/pe assumes that imported symbols live in section named ".idata", but it is not always true (as you can see from objdump output). We should use PE "The Data Directory" to determine location of imported info.
Alex
The text was updated successfully, but these errors were encountered: