trailofbits / trailofbits/pe-parse
Function 'IterExpFull' does not iterate functions exported only by ordinal
Open
Nobody has claimed this yet.
- Dominant language
- C++
- Stars
- 911
- Forks
- 171
- PR merge metrics
- No merged PRs in 30d
Description
The callback function of IterExpFull doesn't seem to be called for functions that are exported only by ordinal (NONAME).
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the IterExpFull entry point and tracing how exported functions are enumerated, focusing on exports marked NONAME or represented only by ordinal. Run the existing parser tests or a minimal PE fixture with ordinal-only exports if available; done means the callback is invoked for those exports without regressing named exports.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- reverse-engineering
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100