mirror of
https://github.com/mandiant/capa.git
synced 2025-12-12 15:49:46 -08:00
use ELF class member instead of vsGetField()
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com>
This commit is contained in:
@@ -132,7 +132,7 @@ def extract_insn_api_features(fh: FunctionHandle, bb, ih: InsnHandle) -> Iterato
|
||||
|
||||
SHT_SYMTAB = 0x2
|
||||
for section in elf.sections:
|
||||
if section.vsGetField("sh_info") & SHT_SYMTAB != 0:
|
||||
if section.sh_info & SHT_SYMTAB:
|
||||
strtab = elf.sections[section.vsGetField("sh_link")]
|
||||
sh_symtab = Shdr.from_viv(section, elf.getSectionBytes(section.name))
|
||||
sh_strtab = Shdr.from_viv(strtab, elf.getSectionBytes(strtab.name))
|
||||
|
||||
Reference in New Issue
Block a user