We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 8a0c19d commit e453eb1Copy full SHA for e453eb1
libyara/modules/pe/pe.c
@@ -1437,7 +1437,11 @@ static void* pe_parse_delayed_imports(PE* pe)
1437
offset = pe_rva_to_offset(pe, nameAddress + sizeof(uint16_t));
1438
1439
if (offset < 0)
1440
+ {
1441
+ name_rva += pointer_size;
1442
+ func_rva += pointer_size;
1443
continue;
1444
+ }
1445
1446
func_name = (char*) yr_strndup(
1447
(char*) (pe->data + offset),
@@ -1454,7 +1458,7 @@ static void* pe_parse_delayed_imports(PE* pe)
1454
1458
sizeof(IMPORT_FUNCTION));
1455
1459
1456
1460
if (imported_func == NULL)
1457
- continue;
1461
+ break;
1462
1463
imported_func->name = func_name;
1464
imported_func->rva = func_rva;
0 commit comments