diff options
| author | midipix <writeonce@midipix.org> | 2016-12-03 11:37:12 -0500 |
|---|---|---|
| committer | midipix <writeonce@midipix.org> | 2016-12-03 11:37:12 -0500 |
| commit | 6fea2560943ee0d7f3195d67a6115b9058273fdc (patch) | |
| tree | 2881c3e5c017ce02918da9a5d776d112b10b8130 | |
| parent | 41c50b296706a40952bdddcf313fe7d5767cf99d (diff) | |
| download | ntapi-6fea2560943ee0d7f3195d67a6115b9058273fdc.tar.bz2 ntapi-6fea2560943ee0d7f3195d67a6115b9058273fdc.tar.xz | |
PE format: update code following libpemagine's pre-alpha API update.
| -rw-r--r-- | src/process/ntapi_tt_map_image_as_data.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/src/process/ntapi_tt_map_image_as_data.c b/src/process/ntapi_tt_map_image_as_data.c index d7171e4..3ab1a7c 100644 --- a/src/process/ntapi_tt_map_image_as_data.c +++ b/src/process/ntapi_tt_map_image_as_data.c @@ -97,7 +97,7 @@ int32_t __stdcall __ntapi_tt_exec_map_image_as_data(nt_executable_image * image) return 0; sec = pe_get_image_section_tbl_addr(base); - pi16 = (uint16_t *)coff->num_of_sections; + pi16 = (uint16_t *)coff->cfh_num_of_sections; if (((size_t)sec-(size_t)base + *pi16 * sizeof(*sec)) > view_size) return __tt_exec_unmap_image( image,base,NT_STATUS_INVALID_IMAGE_FORMAT); @@ -106,10 +106,10 @@ int32_t __stdcall __ntapi_tt_exec_map_image_as_data(nt_executable_image * image) pi16 = (uint16_t *)opt; image->magic = *pi16; - pi16 = (uint16_t *)opt->opt_hdr_32.subsystem; + pi16 = (uint16_t *)opt->opt_hdr_32.coh_subsystem; image->subsystem = *pi16; - pi16 = (uint16_t *)coff->characteristics; + pi16 = (uint16_t *)coff->cfh_characteristics; image->characteristics = *pi16; image->hsection = hsection; |