nkzxw / ontl

Automatically exported from code.google.com/p/ontl
0 stars 0 forks source link

pe::image::find_import_entry returns the first named entry regardless of its name #11

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. for advapi32.dll (XP SP2) use find_bound_import("DeviceIoControl", 
"kernel32.dll");.

What is the expected output? What do you see instead?
A non-null pointer shall be returned as for 
find_bound_import("DeviceIoContril");
The function returns 0 because of searching in the first (ntdll's) 
import_descriptor.

Original issue reported on code.google.com by ntl.supp...@gmail.com on 22 Mar 2008 at 2:33