Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Parsing .pdata of PE files for ARM and other systems #3803

Open
george-hopkins opened this issue Dec 23, 2021 · 1 comment
Open

Parsing .pdata of PE files for ARM and other systems #3803

george-hopkins opened this issue Dec 23, 2021 · 1 comment
Labels
Feature: Loader/PE Status: Future This has future value but is not being worked on at this time

Comments

@george-hopkins
Copy link

Is your feature request related to a problem? Please describe.
Executables for Windows CE on ARM, PowerPC, SH3 and SH4 might contain a .pdata section whose layout is different from x86. Specifically, each entry is 8 bytes in size (see PE Format).

Describe the solution you'd like
ImageRuntimeFunctionEntries should be aware of the target platform.

Describe alternatives you've considered
Writing a script to do the same seems feasible but less elegant to use.

@ryanmkurtz ryanmkurtz self-assigned this Aug 4, 2022
@ryanmkurtz ryanmkurtz added the Status: Internal This is being tracked internally by the Ghidra team label Aug 4, 2022
@ryanmkurtz
Copy link
Collaborator

Things have been refactored to support multiple architectures, and initial ARM support has been added. I am keeping this ticket open though because more work needs to be done on ARM, and support needs to be added for other architectures.

@ryanmkurtz ryanmkurtz added Status: Future This has future value but is not being worked on at this time and removed Status: Internal This is being tracked internally by the Ghidra team labels Aug 10, 2022
@ryanmkurtz ryanmkurtz removed their assignment Aug 10, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature: Loader/PE Status: Future This has future value but is not being worked on at this time
Projects
None yet
Development

No branches or pull requests

2 participants