mirror/ghidra
1
0
Fork 0
mirror of https://github.com/NationalSecurityAgency/ghidra.git synced 2026-08-08 07:40:39 -09:00
Code Issues Packages Projects Releases Wiki Activity

GP-0: Certify

Browse Source
This commit is contained in:
Ryan Kurtz
2026-07-16 13:35:05 -04:00
parent 60c227d494
commit a6ded89c27
1 changed files with 10 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/pe/DelayImportDescriptor.java
View File

@@ -85,18 +85,16 @@ public class DelayImportDescriptor implements StructConverter {
return;
}
// Warn if the INT and IAT declare different numbers of entries.
// These are parallel arrays so a length mismatch is malformed.
// The thunk lists include the trailing null terminator, so the
// import count is size() - 1. This only surfaces the discrepancy;
// it does not change import enumeration.
if (pIAT != 0 && pINT != 0 && thunksIAT.size() != thunksINT.size()) {
int intCount = Math.max(0, thunksINT.size() - 1);
int iatCount = Math.max(0, thunksIAT.size() - 1);
Msg.warn(this, "Delay-load INT/IAT import count mismatch for " +
(dllName != null ? dllName : "unknown DLL") +
": INT=" + intCount + " IAT=" + iatCount);
}
// Warn if the INT and IAT declare different numbers of entries. These are parallel arrays
// so a length mismatch is malformed. The thunk lists include the trailing null terminator,
// so the import count is size() - 1. This only surfaces the discrepancy; it does not change
// import enumeration.
if (pIAT != 0 && pINT != 0 && thunksIAT.size() != thunksINT.size()) {
int intCount = Math.max(0, thunksINT.size() - 1);
int iatCount = Math.max(0, thunksIAT.size() - 1);
Msg.warn(this, "Delay-load INT/IAT import count mismatch for '%s': INT=%d IAT=%d"
.formatted(dllName != null ? dllName : "unknown DLL", intCount, iatCount));
}
thunksBoundIAT = readThunks(ntHeader, reader, pBoundIAT, false);
if (thunksBoundIAT == null) {