fix: issue while parsing PE exports

VirusTotal · Mar 20, 2024 · 7dd709f · 7dd709f
1 parent 45593df
commit 7dd709f
Show file tree

Hide file tree

Showing 3 changed files with 405 additions and 12 deletions.
diff --git a/lib/src/modules/pe/parser.rs b/lib/src/modules/pe/parser.rs
@@ -1844,20 +1844,26 @@ impl<'a> PE<'a> {
         // directory it is a forwarder RVA and points to a NULL terminated
         // ASCII string.
 
-        let func_rvas = self.parse_at_rva(
-            exports.address_of_functions,
-            count(le_u32, num_exports),
-        )?;
+        let func_rvas = self
+            .parse_at_rva(
+                exports.address_of_functions,
+                count(le_u32, num_exports),
+            )
+            .unwrap_or_default();
 
-        let names = self.parse_at_rva(
-            exports.address_of_names,
-            count(le_u32, exports.number_of_names as usize),
-        )?;
+        let names = self
+            .parse_at_rva(
+                exports.address_of_names,
+                count(le_u32, exports.number_of_names as usize),
+            )
+            .unwrap_or_default();
 
-        let name_ordinals = self.parse_at_rva(
-            exports.address_of_name_ordinals,
-            count(le_u16, exports.number_of_names as usize),
-        )?;
+        let name_ordinals = self
+            .parse_at_rva(
+                exports.address_of_name_ordinals,
+                count(le_u16, exports.number_of_names as usize),
+            )
+            .unwrap_or_default();
 
         // Create a vector with one item per exported function. Items in the
         // array initially have function RVA and ordinal only.

diff --git a/...pe/tests/testdata/a2b0ec36f0c6b6925431f38c3a4b2373a8804e347bbe9c65f0fc8648745b25a9.in.zip b/...pe/tests/testdata/a2b0ec36f0c6b6925431f38c3a4b2373a8804e347bbe9c65f0fc8648745b25a9.in.zip