[Forensics-changes] [yara] 56/407: Fix missing IMAGE_FILE_MACHINE_AMD64.
Hilko Bengen
bengen at moszumanska.debian.org
Sat Jul 1 10:28:09 UTC 2017
This is an automated email from the git hooks/post-receive script.
bengen pushed a commit to annotated tag v3.3.0
in repository yara.
commit c31b75663db016c0793d43d748175b7a04e83d05
Author: Wesley Shields <wxs at atarininja.org>
Date: Tue Sep 23 22:25:06 2014 -0400
Fix missing IMAGE_FILE_MACHINE_AMD64.
---
libyara/modules/pe.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libyara/modules/pe.c b/libyara/modules/pe.c
index a1ebbcc..78d1fe0 100644
--- a/libyara/modules/pe.c
+++ b/libyara/modules/pe.c
@@ -2458,7 +2458,7 @@ PIMPORT_LIST parse_imports(PE* pe)
if (offset > 0)
{
- if (pe->header->FileHeader.Machine == 0x8664)
+ if (pe->header->FileHeader.Machine == IMAGE_FILE_MACHINE_AMD64)
{
thunks64 = (PIMAGE_THUNK_DATA64)(pe->data + offset);
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/forensics/yara.git
More information about the forensics-changes
mailing list