NumberOfRvaAndSizes is ignored when reading data directories

[IanLilleyT]

Always reads 16 data directories, even when NumberOfRvaAndSizes is lower (SizeOfOptionalHeader is adjusted accordingly)

From the PE documentation:

Note that the number of directories is not fixed. Before looking for a specific directory, check the NumberOfRvaAndSizes field in the optional header.

Here's a simple executable showing the problem: test.exe (I had to add .txt to upload it here)

This file has two data directories. The rest are being interpreted from the section header, which starts at 0xD8 (notice how Resource Directory also thinks it's located at 0xD8).

Thanks for reading - this is a really nice tool!

[hasherezade]

hi @IanLilleyT ! thanks for reporting. It will be fixed soon.

[hasherezade]

@IanLilleyT - I fixed it, please check the updated version and let me know if everything is fine: https://ci.appveyor.com/project/hasherezade/pe-bear/builds/47217430/job/busafyrhhuy9ogka/artifacts The fix will be included in the next release.

[IanLilleyT]

Works great, thanks!