Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Change pe parser not to load full file data into memory #2714

Closed
4 tasks done
joachimmetz opened this issue Jul 13, 2019 · 0 comments
Closed
4 tasks done

Change pe parser not to load full file data into memory #2714

joachimmetz opened this issue Jul 13, 2019 · 0 comments
Assignees
Labels
enhancement New or improved functionality parsers Issues related to parsers and parser plug-ins

Comments

@joachimmetz
Copy link
Member

joachimmetz commented Jul 13, 2019

Currently the pe parser loads the full file data into memory, due to the PE class interface. Discussed this with the author of pefile and he indicates that wrapping the file-like object into a data slice could do the trick without having to change pefile.

@joachimmetz joachimmetz added enhancement New or improved functionality parsers Issues related to parsers and parser plug-ins labels Jul 13, 2019
@joachimmetz joachimmetz added this to the 2019 August release milestone Jul 13, 2019
@joachimmetz joachimmetz self-assigned this Jul 13, 2019
joachimmetz added a commit to joachimmetz/plaso that referenced this issue Jul 13, 2019
@joachimmetz joachimmetz added the close after review Issue as outstanding pull request(s) and can be closed once these have been reviewed and merged label Jul 13, 2019
@Onager Onager closed this as completed Aug 9, 2019
@joachimmetz joachimmetz removed the close after review Issue as outstanding pull request(s) and can be closed once these have been reviewed and merged label Sep 2, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New or improved functionality parsers Issues related to parsers and parser plug-ins
Projects
None yet
Development

No branches or pull requests

2 participants