Fix/corrupted file architecture key error (#2444)

* Add try except clause
This commit is contained in:
Tamir K.
2024-10-06 09:46:16 +03:00
committed by GitHub
parent 8c8b67a6ea
commit 41c5194693
2 changed files with 9 additions and 1 deletions

View File

@@ -12,6 +12,8 @@
### Bug Fixes
- extractor: fix exception when PE extractor encounters unknown architecture #2440 @Tamir-K
### capa Explorer Web
### capa Explorer IDA Pro plugin

View File

@@ -130,7 +130,13 @@ def extract_file_arch(pe, **kwargs):
elif pe.FILE_HEADER.Machine == pefile.MACHINE_TYPE["IMAGE_FILE_MACHINE_AMD64"]:
yield Arch(ARCH_AMD64), NO_ADDRESS
else:
logger.warning("unsupported architecture: %s", pefile.MACHINE_TYPE[pe.FILE_HEADER.Machine])
try:
logger.warning(
"unsupported architecture: %s",
pefile.MACHINE_TYPE[pe.FILE_HEADER.Machine],
)
except KeyError:
logger.warning("unknown architecture: %s", pe.FILE_HEADER.Machine)
def extract_file_features(pe, buf):