1. 72c6ae4 Fix hard-coded svn revision number. by Stefan Zager · 6 years ago master
  2. 1ceaa27 Fix usage of __revision__. by Stefan Zager · 7 years ago
  3. e3e69a6 Get rid of SVN keyword. by Stefan Zager · 7 years ago
  4. 1679832 -Added a check to verify the expected amount of data is read when parsing the import table (thanks to Angelo Dell'Aera for reporting it). by ero.carrera@gmail.com · 7 years ago
  5. 94ba02d -Updated date range in the copyright message. by ero.carrera@gmail.com · 7 years ago
  6. 109cd1c -Minor addition to ordLookup to make optional the creation of default names. by ero.carrera@gmail.com · 7 years ago
  7. 3f77690 -Improved the handling of PEs with vast number of invalid import symbols. by ero.carrera@gmail.com · 7 years ago
  8. 1832776 -Better handling of the Rich Header. by ero.carrera@gmail.com · 7 years ago
  9. 2534aea -Added Mandiant's ordlookup to resolve the names for some symbols that are exported only by ordinal numbers. by ero.carrera@gmail.com · 7 years ago
  10. b0abd69 -Added Mandiant's ordlookup to resolve the names for some symbols that are exported only by ordinal numbers. by ero.carrera@gmail.com · 7 years ago
  11. 9e4da9f -Fixed an issue that crashed pefile on Windows. by ero.carrera@gmail.com · 7 years ago
  12. 4ee43f6 -Merged patch contributed by Ange Albertini. by ero.carrera@gmail.com · 7 years ago
  13. 59b5bc9 -Added more subsystem types (contributed by Ange Albertini). by ero.carrera@gmail.com · 7 years ago
  14. c0baf9c -Merged patch by Ange Albertini warning of Windows 8's problems loading PE files with the entrypoint pointing within the headers. by ero.carrera@gmail.com · 7 years ago
  15. fb6902e -Minor tweaks to fix the regression tests. by ero.carrera@gmail.com · 7 years ago
  16. e0c564e -Kept a working version of generate_checksum for Python versions < 2.6 (bytearray only was included in Python 2.6) by ero.carrera@gmail.com · 7 years ago
  17. 824730c -Merged path from ThreatGrid's Wesley Brown. Thanks! Summary: changed memory mapping usage, revamped to use bytearrays rather than list, complete rewrite of the checksum generation algorithm to be much more memory efficient, and less susceptible to PE bomb attacks by ero.carrera@gmail.com · 7 years ago
  18. fd6e985 -Improved parsing files with thousands of sections. Sections that appear to be invalid will now be ignored and some of the checks have been optimized for the cases where a file still has many possibly valid sections. by ero.carrera@gmail.com · 8 years ago
  19. 6fbf45c -Added some safety checks. by ero.carrera@gmail.com · 8 years ago
  20. 714882b -Fixed a problem parsing section headers. Added an extra check for section headers containing only null bytes. by ero.carrera@gmail.com · 8 years ago
  21. 0746016 -Fixed the naming issue introduced in the last commit. by ero.carrera@gmail.com · 8 years ago
  22. 7a9bb5e -Improved the checks being done when parsing the exports and the bound imports directories. The potential data ranges to consider have been constrained further and only strings with certain characteristics will be allowed as module names in the bound forwarders. by ero.carrera@gmail.com · 8 years ago
  23. c3b26d6 -Attempting to fix Issue 35 where a big memory allocation is attempted (which can be avoided). When working with large files it could lead to MemoryError exceptions. by ero.carrera@gmail.com · 9 years ago
  24. 56e9445 -Added a check to make verify that a section's calculated ending address does not overlap a subsequent section. If so cut it down to fit. by ero.carrera@gmail.com · 9 years ago
  25. 8ec82ea -Added sanity checks for invalid relocation information. VirtualAddress and SizeOfBlock are checked against a wide boundary that should never surpass (SizeOfImage) by ero.carrera@gmail.com · 9 years ago
  26. d7d53b6 -Merged the patch from Issue 32 (and fixed some problems with it) regarding mmap files left open on Python 2.5.x by ero.carrera@gmail.com · 9 years ago
  27. 60aa045 -Extended the fix for Issue 10 and Issue 29 to also handle the VarFileInfo structure by ero.carrera@gmail.com · 9 years ago
  28. c2a9d9a -Fixed Issue 10 and Issue 29 (related) by also parsing strings for stringfileinfo_struct.Type=0 in addition of Type=1 by ero.carrera@gmail.com · 9 years ago
  29. fc9c3ac -Fixed error in the reporting of the warning message in the alignment adjustment functions. I've moved them into the PE class in order to make accessing the pe attributes more convenient by ero.carrera@gmail.com · 9 years ago
  30. acf03a1 -Fixed Issue 27 by ero.carrera@gmail.com · 9 years ago
  31. d796cd6 -Fixed some exceptions occurring when attempting to work with variables not expected to be None. Added the necessary checks by ero.carrera@gmail.com · 10 years ago
  32. 111827a -As suggested in Issue 26 a close() method was added that closes the mmap of the file (implementation is slightly different as suggested by the case opener) by ero.carrera@gmail.com · 10 years ago
  33. 4a4ccbc -Fixed a couple of small bugs in the parsing of resources where an object was not defined in a code-path and added an extra check for the existence of a valid object within the language entries by ero.carrera@gmail.com · 10 years ago
  34. ea22a60 -Added a (high) hard-coded limit to the number of directory entries to process. Some specially crafted directories could lead to long processing times by ero.carrera@gmail.com · 10 years ago
  35. 9310e3a -Updated copyright notice by ero.carrera@gmail.com · 10 years ago
  36. e9b3723 -Added additional check in the resources string parser to avoid processing invalid entries by ero.carrera@gmail.com · 10 years ago
  37. 1315898 -Added additional check in the resources string parser to avoid processing strings of length zero by ero.carrera@gmail.com · 10 years ago
  38. 852d6ec -Added Ange Albertini's patch to provide more helpful error messages when pefile meets NE/LE/LX files and ZM (as opposed to MZ) files. The PEFormatError() exception raised will inform about the type of file. by ero.carrera@gmail.com · 10 years ago
  39. 8c4ccb5 -Fixed Issue 12, there was a bug calculating the offset to the VS_VERSIONINFO structure that would manifest in some files by ero.carrera@gmail.com · 10 years ago
  40. 1145f54 -Improved handling of some more cases of unorthodox, although valid, FileAlignment and SectionAlignment values and combinations of those by ero.carrera@gmail.com · 10 years ago
  41. dac3329 -Improved handling of cases of unorthodox, although valid, FileAlignment and SectionAlignment values and combinations of those. It turns out that they have to be in certain relation for some value ranges by ero.carrera@gmail.com · 10 years ago
  42. fa0f836 -Added Ange Albertini's concept code to parse the strings contained in the resources directory. They will now be displayed when calling the dump_info() method. If an entry in the resources directory contains strings they will be accessible through entry.directory.strings. Also it's possible to retrieve at once all strings found by calling the PE instance's method get_resources_strings() which will return a list with all strings found or an empty string if none are found or the file has no resources directory by ero.carrera@gmail.com · 10 years ago
  43. adfe50c -Fixed a bug parsing small invalid PE files where the proper exception (PEFormatError) would not be raised and instead pefile would crash by ero.carrera@gmail.com · 10 years ago
  44. 218af29 -Small fix to be able to retrieve strings outside section boundaries i.e., when a packer keeps strings overlapping headers or in overlays by ero.carrera@gmail.com · 10 years ago
  45. 4d64bb1 -Implemented fixes for sections at unaligned raw offsets. As pointed out by Ange Albertini if those offsets are smaller than the FileAlignment they are rounded to 0 by the Windows loader. pefile now emulates such behavior by ero.carrera@gmail.com · 10 years ago
  46. b95b916 - Minor changes by ero.carrera@gmail.com · 10 years ago
  47. f6cb74f - mmap is now used to not load into memory the whole file unless working with it requires it. This should enable pefile to parse much larger images in systems with limited memory by ero.carrera@gmail.com · 10 years ago
  48. 14bb366 - Small tweak to correctly generate memory mapped images ( through get_memory_mapped_image() ) of files with no sections or with data in the gap after the header and before the first section by ero.carrera@gmail.com · 10 years ago
  49. 2a27741 - Improved the fetching of overlay raw data from the file. In some cases data might lay beyond the areas described by the sections, or sections might be missing altogether, and still be a valid PE file. If the data lies within the file's whole length it will now be fetched regardless of whether it is within a section's boundaries by ero.carrera@gmail.com · 10 years ago
  50. e8f64b7 - Added small patch contributed by nriva to store the thunk's offset and RVA as thunk_offset and thunk_rva in each of the import thunks by ero.carrera@gmail.com · 10 years ago
  51. feceb78 - Long due! but finally merged Ange Albertini's patch to parse the Rich header by ero.carrera@gmail.com · 10 years ago
  52. e58d0a3 - Minor additional improvements to the parsing of language IDs. Added handling of incorrect IDs, now reported as "*unknown*" by ero.carrera@gmail.com · 10 years ago
  53. 7493480 - Improved parsing of language IDs in the resource strings. Language pairs (LANG, SUBLANG) are now reported when dumping a PE's information by ero.carrera@gmail.com · 10 years ago
  54. 9ce04b4 -Added an upper bound on the number of export entries that will be handled. If there are more entries than what would fit in what's left until the end of the file we don't attempt to process any more by ero.carrera@gmail.com · 10 years ago
  55. c41079e -Added a warning message when entries typical of packed files are found in the import table by ero.carrera@gmail.com · 10 years ago
  56. 374d11f - bugfix: if found, trailing wildcards are removed from signatures at load time. They don't make much sense and, if present, led to the signature not matching byte sequences that should. Any sequence of '??' after the last non-'??' byte in the signature is ignored. by ero.carrera@gmail.com · 11 years ago
  57. 0cbdb05 - Added support for writing back to the PE file any modifications made to the entries in the imports table. Beware that adding name strings longer than the existing one will probably lead to trouble by ero.carrera@gmail.com · 11 years ago
  58. d964ba6 - Added support for writing back to the PE file any modifications made to the entries in the exports table. Beware that adding name strings longer than the existing one will probably lead to trouble by ero.carrera@gmail.com · 11 years ago
  59. 7869ac9 - Added support for writing back to the PE file any modifications made to the entries in the relocations table. If the RVA of an entry is modified outside the ranges where it can be applied it's automatically readjusted to fit by ero.carrera@gmail.com · 11 years ago
  60. 0f56eee by ero.carrera@gmail.com · 11 years ago
  61. 919c9e8 - Aesthetic fixes for some warning messages by ero.carrera@gmail.com · 11 years ago
  62. 0c03a54 -Added convenience methods to identify DLLs, standard EXEs and Windows drivers by ero.carrera@gmail.com · 11 years ago
  63. daf6bba More spelling errors fixed by Ange Albertini by ero.carrera@gmail.com · 12 years ago
  64. 0a7ed98 Lots of spelling errors fixed by Ange Albertini by ero.carrera@gmail.com · 12 years ago
  65. 12b0ecb Fixed bug reported by clita at bitdefender.com when calculating the checksum of files that were not dword-aligned. It was necessary to zero-pad them for the checksum to be correctly calculated by ero.carrera@gmail.com · 12 years ago
  66. d0ca757 -Fixed an "index out of range" problem when parsing some unusual import tables by ero.carrera@gmail.com · 12 years ago
  67. 2d9ae51 Fixed infinite loop parsing version information triggered by a sample by ero.carrera@gmail.com · 12 years ago
  68. cbd888b -Some improvements made to unicode string processing. When random data was added where unicode strings should be in a standard PE file, the data wasn't being re-assembled correctly by ero.carrera@gmail.com · 12 years ago
  69. f4ebf49 -Added processing of the LOAD_CONFIG data directory by ero.carrera@gmail.com · 12 years ago
  70. 3ea8f2a Updated copyright string and set version to 1.2.10-REVISION# by ero.carrera@gmail.com · 12 years ago
  71. a75f4e7 -Fixed bug in contains_offset(). The end of the section's data on disk was being calculated as VirtualAddress + SizeOfRawData instead of the correct: PointerToRawData + SizeOfRawData by ero.carrera@gmail.com · 12 years ago
  72. 15dd9e4 -Started using the subversion revision keyword by ero.carrera@gmail.com · 12 years ago
  73. ac4af94 -Started using the subversion revision keyword by ero.carrera@gmail.com · 12 years ago
  74. 1d5b4f1 -Upped version to 1.2.9.3 by ero.carrera@gmail.com · 12 years ago
  75. 42536de -Whitespace clean-up by ero.carrera@gmail.com · 12 years ago
  76. c5f52b5 by ero.carrera · 13 years ago
  77. 1c8e421 by ero.carrera · 13 years ago
  78. a38674e by ero.carrera · 13 years ago
  79. 916b886 by ero.carrera · 13 years ago
  80. 40881eb by ero.carrera · 13 years ago
  81. a6475e3 by ero.carrera · 13 years ago
  82. c7ae14b by ero.carrera · 13 years ago
  83. 21cbdaf by ero.carrera · 13 years ago
  84. 8a25be7 by ero.carrera · 13 years ago
  85. b040e8d Added changes prior to moving to Google Code by ero.carrera · 13 years ago
  86. 4b50b00 Initial import by ero.carrera · 13 years ago
  87. 842dbf0 Initial directory structure. by (no author) · 13 years ago