[Forensics-changes] [yara] 165/192: Fix variable length blob size offset (#651)

[Hilko Bengen]

This is an automated email from the git hooks/post-receive script.

bengen pushed a commit to annotated tag v3.6.0
in repository yara.

commit ea6873ed97fafdd1cc9010991b2449256ac3353e
Author: Nate Rosenblum <flander at gmail.com>
Date:   Sat May 6 11:37:11 2017 -0700

    Fix variable length blob size offset (#651)
    
    Refs #650
---
 libyara/modules/dotnet.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libyara/modules/dotnet.c b/libyara/modules/dotnet.c
index a050d5a..a431a6c 100644
--- a/libyara/modules/dotnet.c
+++ b/libyara/modules/dotnet.c
@@ -185,7 +185,7 @@ BLOB_PARSE_RESULT dotnet_parse_blob_entry(
                      (*(offset + 1) << 16) |
                      (*(offset + 2) << 8) |
                       *(offset + 3);
-    result.size = 3;
+    result.size = 4;
   }
   else
   {

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/forensics/yara.git