ida: embedded pe: offsets are virtual addresses rather than file offsets
Open
bug
ida
- Dominant language
- Python
- Stars
- 6.2k
- Forks
- 726
- Avg merge
- 11d 11h
- Merged PRs (30d)
- 7
Description
#2745 for the IDA extractor
Contributor guide
Research direction
Start by reading issue #2745 and locating the IDA extractor entry point; no file or test is named in this issue. Determine where embedded PE offsets are interpreted, then verify that the extractor reports file offsets rather than virtual addresses with an appropriate regression test.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- reverse-engineering
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100