[Forensics-changes] [yara] 56/407: Fix missing IMAGE_FILE_MACHINE_AMD64.

Hilko Bengen bengen at moszumanska.debian.org
Sat Jul 1 10:28:09 UTC 2017


This is an automated email from the git hooks/post-receive script.

bengen pushed a commit to annotated tag v3.3.0
in repository yara.

commit c31b75663db016c0793d43d748175b7a04e83d05
Author: Wesley Shields <wxs at atarininja.org>
Date:   Tue Sep 23 22:25:06 2014 -0400

    Fix missing IMAGE_FILE_MACHINE_AMD64.
---
 libyara/modules/pe.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libyara/modules/pe.c b/libyara/modules/pe.c
index a1ebbcc..78d1fe0 100644
--- a/libyara/modules/pe.c
+++ b/libyara/modules/pe.c
@@ -2458,7 +2458,7 @@ PIMPORT_LIST parse_imports(PE* pe)
 
       if (offset > 0)
       {
-        if (pe->header->FileHeader.Machine == 0x8664)
+        if (pe->header->FileHeader.Machine == IMAGE_FILE_MACHINE_AMD64)
         {
           thunks64 = (PIMAGE_THUNK_DATA64)(pe->data + offset);
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/forensics/yara.git



More information about the forensics-changes mailing list