[File] [PATCH] Support ARM64 Linux vmlinux files

[Christos Zoulas]

On Oct 17,  9:27am, john at sodarock.com (John Villalovos) wrote:
-- Subject: Re: [File] [PATCH] Support ARM64 Linux vmlinux files

| Any feedback on this patch? Is there something else I should do?

I think that this will break stuff because the lines you removed, will
end up making the <0x40 test below enforced for PE binaries. Do you
have an example file we can test with?

thanks,

christos

# All non-DOS EXE extensions have the relocation table more than 0x40 bytes into
 the file.
>0x18   leshort <0x40 MS-DOS executable
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ This will be applied to PE binaries now
!:mime  application/x-dosexec
# Windows and later versions of DOS will allow .EXEs to be named with a .COM
# extension, mostly for compatibility's sake.
!:ext   exe/com
# These traditional tests usually work but not always.  When test quality suppor
t is
# implemented these can be turned on.
#>>0x18 leshort 0x1c    (Borland compiler)
#>>0x18 leshort 0x1e    (MS compiler)

# If the relocation table is 0x40 or more bytes into the file, it's definitely
# not a DOS EXE.
>0x18  leshort >0x3f
^^^^^^^^^^^^^^^^^^^^ This is what you removed.


christos