djhenderson / pefile

Automatically exported from code.google.com/p/pefile
Other
0 stars 0 forks source link

MemoryError while parsing exe #40

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Instantiate pefile.PE with a particular exe 

What is the expected output? What do you see instead?

I expect the executable to be loaded.

I get :
  File "remove_invalid.py", line 67, in <module>
    pe = pefile.PE(local_exe_name)
  File "build/bdist.linux-i686/egg/pefile.py", line 1667, in __init__
  File "build/bdist.linux-i686/egg/pefile.py", line 1785, in __parse__
MemoryError

What version of the product are you using? On what operating system?

1.2.10-114 on "Red Hat Linux release 7.3 (Valhalla)" (sic)

Please provide any additional information below.

Sorry, I can't provide the original executable for confidentiality reasons.

Original issue reported on code.google.com by yannick.jost on 5 Jul 2012 at 7:28

GoogleCodeExporter commented 9 years ago
Without any more details there's little that can be done.

Original comment by ero.carr...@gmail.com on 9 Aug 2012 at 11:48

GoogleCodeExporter commented 9 years ago
What do you need for details ?

Original comment by yannick.jost on 10 Aug 2012 at 5:56

GoogleCodeExporter commented 9 years ago
If you can't provide the file, could you send me the hash? I might be able to 
find it myself then.
Otherwise we could try a few things: 
-What's the size of the file?
-Do you know what part of the parsing triggers the problem? you could try 
loading the file without parsing any directories and then selectively parse 
each of them, as detailed under: 
http://code.google.com/p/pefile/wiki/UsageExamples#Dumping_all_the_information 
(it shows how to selectively choose what directories to process). You can try 
one by one until the MemoryError triggers. Then we will closer to the problem.

Original comment by ero.carr...@gmail.com on 10 Aug 2012 at 9:27

GoogleCodeExporter commented 9 years ago

Original comment by ero.carr...@gmail.com on 4 Dec 2013 at 2:11