ida: fix section name as dynamic library name provided by IDA
Open
enhancement
ida
- Dominant language
- Python
- Stars
- 6.2k
- Forks
- 726
- Avg merge
- 11d 11h
- Merged PRs (30d)
- 7
Description
Continuing the PR changes here: https://github.com/mandiant/capa/pull/1418#discussion_r1152956906_
we should figure out how to comprehensively identify when IDA provides this dynamic library name and strip it out, rather than hardcoding section names into the capa source code.
Contributor guide
Research direction
Start with the discussion linked from PR #1418 and trace the related capa source changes for IDA section names. Determine how to identify names supplied as dynamic library names without hardcoding them, then verify that those names are stripped correctly across the relevant IDA cases.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- reverse-engineering
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100