aboutcode-org / aboutcode-org/extractcode

Deal properly with large UPX-compressed binaries

未关闭
#14 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
Python
星标
39
派生
23
PR 合并指标
30 天内没有已合并 PR

描述

Scanning UPX-compressed executables does not make sense unless they could be unpacked first.
See https://en.wikipedia.org/wiki/UPX

For instance these PostgreSQL installers take a large amount of resources and time to scan.
And there is little to squeeze out of the raw binaries.
- One is a large statically-linked ELf http://get.enterprisedb.com/postgresql/postgresql-9.4.1-1-linux-x64.run for Linux.
- The other a Windows exe from http://get.enterprisedb.com/postgresql/postgresql-9.4.1-1-windows-x64.exe

They are not really archives but exe hence the reason why they are still scanned for now.
We will need to figure out a way to avoid issues when dealing with these large binaries that cannot yield much when scanned.
Both are compressed with UPX which makes their binary completely opaque short of decompressing them assuming they are using a standard UPX compressor.

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。