From 95b5f122263c36f999ab3c73f4ff5ddb7f44741e Mon Sep 17 00:00:00 2001 From: Matt Nadareski Date: Wed, 9 Nov 2022 21:55:15 -0800 Subject: [PATCH] Add PE grouped sections note --- BurnOutSharp.Models/PortableExecutable/Executable.cs | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/BurnOutSharp.Models/PortableExecutable/Executable.cs b/BurnOutSharp.Models/PortableExecutable/Executable.cs index a7182fff..4f698c56 100644 --- a/BurnOutSharp.Models/PortableExecutable/Executable.cs +++ b/BurnOutSharp.Models/PortableExecutable/Executable.cs @@ -31,6 +31,12 @@ namespace BurnOutSharp.Models.PortableExecutable /// public OptionalHeader OptionalHeader { get; set; } + // TODO: Support grouped sections in section reading and parsing + // https://learn.microsoft.com/en-us/windows/win32/debug/pe-format#grouped-sections-object-only + // Grouped sections are ordered and mean that the data in the sections contributes + // to the "base" section (the one without the "$X" suffix). This may negatively impact + // the use of some of the different types of executables. + /// /// Section table /// @@ -66,7 +72,6 @@ namespace BurnOutSharp.Models.PortableExecutable #endregion // TODO: Implement and/or document the following non-modeled parts: - // - Grouped Sections (Object Only) // - Certificate Data // - Delay Import Address Table // - Delay Import Name Table