- 72c6ae4 Fix hard-coded svn revision number. by Stefan Zager · 10 years ago master
- 1ceaa27 Fix usage of __revision__. by Stefan Zager · 11 years ago
- e3e69a6 Get rid of SVN keyword. by Stefan Zager · 11 years ago
- 1679832 -Added a check to verify the expected amount of data is read when parsing the import table (thanks to Angelo Dell'Aera for reporting it). by ero.carrera@gmail.com · 11 years ago
- 94ba02d -Updated date range in the copyright message. by ero.carrera@gmail.com · 11 years ago
- 109cd1c -Minor addition to ordLookup to make optional the creation of default names. by ero.carrera@gmail.com · 11 years ago
- 3f77690 -Improved the handling of PEs with vast number of invalid import symbols. by ero.carrera@gmail.com · 11 years ago
- 1832776 -Better handling of the Rich Header. by ero.carrera@gmail.com · 11 years ago
- 2534aea -Added Mandiant's ordlookup to resolve the names for some symbols that are exported only by ordinal numbers. by ero.carrera@gmail.com · 11 years ago
- b0abd69 -Added Mandiant's ordlookup to resolve the names for some symbols that are exported only by ordinal numbers. by ero.carrera@gmail.com · 11 years ago
- 9e4da9f -Fixed an issue that crashed pefile on Windows. by ero.carrera@gmail.com · 11 years ago
- 4ee43f6 -Merged patch contributed by Ange Albertini. by ero.carrera@gmail.com · 11 years ago
- 59b5bc9 -Added more subsystem types (contributed by Ange Albertini). by ero.carrera@gmail.com · 11 years ago
- c0baf9c -Merged patch by Ange Albertini warning of Windows 8's problems loading PE files with the entrypoint pointing within the headers. by ero.carrera@gmail.com · 11 years ago
- fb6902e -Minor tweaks to fix the regression tests. by ero.carrera@gmail.com · 11 years ago
- e0c564e -Kept a working version of generate_checksum for Python versions < 2.6 (bytearray only was included in Python 2.6) by ero.carrera@gmail.com · 11 years ago
- 824730c -Merged path from ThreatGrid's Wesley Brown. Thanks! Summary: changed memory mapping usage, revamped to use bytearrays rather than list, complete rewrite of the checksum generation algorithm to be much more memory efficient, and less susceptible to PE bomb attacks by ero.carrera@gmail.com · 11 years ago
- fd6e985 -Improved parsing files with thousands of sections. Sections that appear to be invalid will now be ignored and some of the checks have been optimized for the cases where a file still has many possibly valid sections. by ero.carrera@gmail.com · 12 years ago
- 6fbf45c -Added some safety checks. by ero.carrera@gmail.com · 12 years ago
- 714882b -Fixed a problem parsing section headers. Added an extra check for section headers containing only null bytes. by ero.carrera@gmail.com · 12 years ago
- 0746016 -Fixed the naming issue introduced in the last commit. by ero.carrera@gmail.com · 12 years ago
- 7a9bb5e -Improved the checks being done when parsing the exports and the bound imports directories. The potential data ranges to consider have been constrained further and only strings with certain characteristics will be allowed as module names in the bound forwarders. by ero.carrera@gmail.com · 12 years ago
- c3b26d6 -Attempting to fix Issue 35 where a big memory allocation is attempted (which can be avoided). When working with large files it could lead to MemoryError exceptions. by ero.carrera@gmail.com · 13 years ago
- 56e9445 -Added a check to make verify that a section's calculated ending address does not overlap a subsequent section. If so cut it down to fit. by ero.carrera@gmail.com · 13 years ago
- 8ec82ea -Added sanity checks for invalid relocation information. VirtualAddress and SizeOfBlock are checked against a wide boundary that should never surpass (SizeOfImage) by ero.carrera@gmail.com · 13 years ago
- d7d53b6 -Merged the patch from Issue 32 (and fixed some problems with it) regarding mmap files left open on Python 2.5.x by ero.carrera@gmail.com · 13 years ago
- 60aa045 -Extended the fix for Issue 10 and Issue 29 to also handle the VarFileInfo structure by ero.carrera@gmail.com · 13 years ago
- c2a9d9a -Fixed Issue 10 and Issue 29 (related) by also parsing strings for stringfileinfo_struct.Type=0 in addition of Type=1 by ero.carrera@gmail.com · 13 years ago
- fc9c3ac -Fixed error in the reporting of the warning message in the alignment adjustment functions. I've moved them into the PE class in order to make accessing the pe attributes more convenient by ero.carrera@gmail.com · 13 years ago
- acf03a1 -Fixed Issue 27 by ero.carrera@gmail.com · 13 years ago
- d796cd6 -Fixed some exceptions occurring when attempting to work with variables not expected to be None. Added the necessary checks by ero.carrera@gmail.com · 13 years ago
- 111827a -As suggested in Issue 26 a close() method was added that closes the mmap of the file (implementation is slightly different as suggested by the case opener) by ero.carrera@gmail.com · 13 years ago
- 4a4ccbc -Fixed a couple of small bugs in the parsing of resources where an object was not defined in a code-path and added an extra check for the existence of a valid object within the language entries by ero.carrera@gmail.com · 14 years ago
- ea22a60 -Added a (high) hard-coded limit to the number of directory entries to process. Some specially crafted directories could lead to long processing times by ero.carrera@gmail.com · 14 years ago
- 9310e3a -Updated copyright notice by ero.carrera@gmail.com · 14 years ago
- e9b3723 -Added additional check in the resources string parser to avoid processing invalid entries by ero.carrera@gmail.com · 14 years ago
- 1315898 -Added additional check in the resources string parser to avoid processing strings of length zero by ero.carrera@gmail.com · 14 years ago
- 852d6ec -Added Ange Albertini's patch to provide more helpful error messages when pefile meets NE/LE/LX files and ZM (as opposed to MZ) files. The PEFormatError() exception raised will inform about the type of file. by ero.carrera@gmail.com · 14 years ago
- 8c4ccb5 -Fixed Issue 12, there was a bug calculating the offset to the VS_VERSIONINFO structure that would manifest in some files by ero.carrera@gmail.com · 14 years ago
- 1145f54 -Improved handling of some more cases of unorthodox, although valid, FileAlignment and SectionAlignment values and combinations of those by ero.carrera@gmail.com · 14 years ago
- dac3329 -Improved handling of cases of unorthodox, although valid, FileAlignment and SectionAlignment values and combinations of those. It turns out that they have to be in certain relation for some value ranges by ero.carrera@gmail.com · 14 years ago
- fa0f836 -Added Ange Albertini's concept code to parse the strings contained in the resources directory. They will now be displayed when calling the dump_info() method. If an entry in the resources directory contains strings they will be accessible through entry.directory.strings. Also it's possible to retrieve at once all strings found by calling the PE instance's method get_resources_strings() which will return a list with all strings found or an empty string if none are found or the file has no resources directory by ero.carrera@gmail.com · 14 years ago
- adfe50c -Fixed a bug parsing small invalid PE files where the proper exception (PEFormatError) would not be raised and instead pefile would crash by ero.carrera@gmail.com · 14 years ago
- 218af29 -Small fix to be able to retrieve strings outside section boundaries i.e., when a packer keeps strings overlapping headers or in overlays by ero.carrera@gmail.com · 14 years ago
- 4d64bb1 -Implemented fixes for sections at unaligned raw offsets. As pointed out by Ange Albertini if those offsets are smaller than the FileAlignment they are rounded to 0 by the Windows loader. pefile now emulates such behavior by ero.carrera@gmail.com · 14 years ago
- b95b916 - Minor changes by ero.carrera@gmail.com · 14 years ago
- f6cb74f - mmap is now used to not load into memory the whole file unless working with it requires it. This should enable pefile to parse much larger images in systems with limited memory by ero.carrera@gmail.com · 14 years ago
- 14bb366 - Small tweak to correctly generate memory mapped images ( through get_memory_mapped_image() ) of files with no sections or with data in the gap after the header and before the first section by ero.carrera@gmail.com · 14 years ago
- 2a27741 - Improved the fetching of overlay raw data from the file. In some cases data might lay beyond the areas described by the sections, or sections might be missing altogether, and still be a valid PE file. If the data lies within the file's whole length it will now be fetched regardless of whether it is within a section's boundaries by ero.carrera@gmail.com · 14 years ago
- e8f64b7 - Added small patch contributed by nriva to store the thunk's offset and RVA as thunk_offset and thunk_rva in each of the import thunks by ero.carrera@gmail.com · 14 years ago
- feceb78 - Long due! but finally merged Ange Albertini's patch to parse the Rich header by ero.carrera@gmail.com · 14 years ago
- e58d0a3 - Minor additional improvements to the parsing of language IDs. Added handling of incorrect IDs, now reported as "*unknown*" by ero.carrera@gmail.com · 14 years ago
- 7493480 - Improved parsing of language IDs in the resource strings. Language pairs (LANG, SUBLANG) are now reported when dumping a PE's information by ero.carrera@gmail.com · 14 years ago
- 9ce04b4 -Added an upper bound on the number of export entries that will be handled. If there are more entries than what would fit in what's left until the end of the file we don't attempt to process any more by ero.carrera@gmail.com · 14 years ago
- c41079e -Added a warning message when entries typical of packed files are found in the import table by ero.carrera@gmail.com · 14 years ago
- 374d11f - bugfix: if found, trailing wildcards are removed from signatures at load time. They don't make much sense and, if present, led to the signature not matching byte sequences that should. Any sequence of '??' after the last non-'??' byte in the signature is ignored. by ero.carrera@gmail.com · 14 years ago
- 0cbdb05 - Added support for writing back to the PE file any modifications made to the entries in the imports table. Beware that adding name strings longer than the existing one will probably lead to trouble by ero.carrera@gmail.com · 15 years ago
- d964ba6 - Added support for writing back to the PE file any modifications made to the entries in the exports table. Beware that adding name strings longer than the existing one will probably lead to trouble by ero.carrera@gmail.com · 15 years ago
- 7869ac9 - Added support for writing back to the PE file any modifications made to the entries in the relocations table. If the RVA of an entry is modified outside the ranges where it can be applied it's automatically readjusted to fit by ero.carrera@gmail.com · 15 years ago
- 0f56eee by ero.carrera@gmail.com · 15 years ago
- 919c9e8 - Aesthetic fixes for some warning messages by ero.carrera@gmail.com · 15 years ago
- 0c03a54 -Added convenience methods to identify DLLs, standard EXEs and Windows drivers by ero.carrera@gmail.com · 15 years ago
- daf6bba More spelling errors fixed by Ange Albertini by ero.carrera@gmail.com · 16 years ago
- 0a7ed98 Lots of spelling errors fixed by Ange Albertini by ero.carrera@gmail.com · 16 years ago
- 12b0ecb Fixed bug reported by clita at bitdefender.com when calculating the checksum of files that were not dword-aligned. It was necessary to zero-pad them for the checksum to be correctly calculated by ero.carrera@gmail.com · 16 years ago
- d0ca757 -Fixed an "index out of range" problem when parsing some unusual import tables by ero.carrera@gmail.com · 16 years ago
- 2d9ae51 Fixed infinite loop parsing version information triggered by a sample by ero.carrera@gmail.com · 16 years ago
- cbd888b -Some improvements made to unicode string processing. When random data was added where unicode strings should be in a standard PE file, the data wasn't being re-assembled correctly by ero.carrera@gmail.com · 16 years ago
- f4ebf49 -Added processing of the LOAD_CONFIG data directory by ero.carrera@gmail.com · 16 years ago
- 3ea8f2a Updated copyright string and set version to 1.2.10-REVISION# by ero.carrera@gmail.com · 16 years ago
- a75f4e7 -Fixed bug in contains_offset(). The end of the section's data on disk was being calculated as VirtualAddress + SizeOfRawData instead of the correct: PointerToRawData + SizeOfRawData by ero.carrera@gmail.com · 16 years ago
- 15dd9e4 -Started using the subversion revision keyword by ero.carrera@gmail.com · 16 years ago
- ac4af94 -Started using the subversion revision keyword by ero.carrera@gmail.com · 16 years ago
- 1d5b4f1 -Upped version to 1.2.9.3 by ero.carrera@gmail.com · 16 years ago
- 42536de -Whitespace clean-up by ero.carrera@gmail.com · 16 years ago
- c5f52b5 by ero.carrera · 17 years ago
- 1c8e421 by ero.carrera · 17 years ago
- a38674e by ero.carrera · 17 years ago
- 916b886 by ero.carrera · 17 years ago
- 40881eb by ero.carrera · 17 years ago
- a6475e3 by ero.carrera · 17 years ago
- c7ae14b by ero.carrera · 17 years ago
- 21cbdaf by ero.carrera · 17 years ago
- 8a25be7 by ero.carrera · 17 years ago
- b040e8d Added changes prior to moving to Google Code by ero.carrera · 17 years ago
- 4b50b00 Initial import by ero.carrera · 17 years ago
- 842dbf0 Initial directory structure. by (no author) · 17 years ago