DOS ain't dead

[BUG] PE 1.9 has one more bug (and a "nonstandard" stub) (DOSX)

posted by Japheth , Germany (South), 28.10.2007, 09:50
(edited by Japheth on 28.10.2007, 10:04)

> COOL Bug is fixed ... no relocs displayed at all
>
> Finally, not really surprising ... GT2 reports the same and they probably
> got suppressed (always useless in EXE ?) already when ASSpacking -
> thus ASSpackASSassin has nothing to recover

the relocs section is 8 bytes long. But since each reloc array has a 8 byte header, there are indeed no relocs at all in this binary. Strange.

> Well, there is one more bug plus some additional issues:
>
> - [BUG] "out of memory" when trying to display the "symbols" of this file
> ... not new, already present in 1.8

The MS DUMPBIN tool also tries to display the symbols and fails (when trying to position the file pointer to the symbol table). So this is not a bug. There are no symbols present in the binary, the fields in the header concerning symbols are misused.

> - [minor] | (!eax) | eax == 0 | (eax == 0) | 3 "different" ways to do the
> same (?) thing ?

The purpose is to confuse potential readers. A very common way to defend from unexperienced coders.

> It might be a good idea not to point MS linker to DPMIST32.BIN and
> instead invoke PESTUB after ... or use VALX ... of course unless there are
> arguments against I'm not aware of

POLINK could be used. It's mostly MS link compatible (understands the same arguments) and doesn't include additional bytes. But I'm not paranoid about using MS binaries.

---
MS-DOS forever!

Complete thread:

• [BUG] PE has a bug (and a "nonstandard" stub) - DOS386, 25.10.2007, 06:54 (DOSX)
  • [BUG] PE has a bug (and a "nonstandard" stub) - Japheth, 26.10.2007, 09:38
    • [BUG] PE 1.9 has one more bug (and a "nonstandard" stub) - DOS386, 28.10.2007, 04:08
      • [BUG] PE 1.9 has one more bug (and a "nonstandard" stub) - Japheth, 28.10.2007, 09:50