search

redballoonsecurity / ofrak

OFRAK: unpack, modify, and repack binaries.
https://ofrak.com
Other
1.82k stars 128 forks source link

elf analyzer assumes elf is unpacked when running analyzer #475

Open dannyp303 opened 3 weeks ago

dannyp303 commented 3 weeks ago

If you identify and then analyze an elf without unpacking, these lines will throw an error since the children don't exist.

https://github.com/redballoonsecurity/ofrak/blob/d8e22a949782bdb48c24920138d8fda2962d9cc8/ofrak_core/ofrak/core/elf/analyzer.py#L368-L381