Implements candidate code for pocessing ArrayOfPropertyValues#16
Implements candidate code for pocessing ArrayOfPropertyValues#16ostracon wants to merge 7 commits intoDissectMalware:mainfrom
Conversation
…2b6c6519bc329aa8519aece
|
Added code to handle a few more edge cases found while looking at various files. |
|
Thank you for your PR can you also hare you samples for the edge cases? |
|
Independent reproduction: applying this patch on top of Two small observations on the diff that may be worth folding in (or doing as a follow-up):
Either way, this PR fixes a real, reproducible failure on a non-trivial number of files. Combined with #20 (FileNode.data initialization) and #26 ( |
Tested on
5ad84c75b4a8825a4ee49fcb2ab895f0a51c9877fc4e50595fa1917ae1daa748(in VT), which contains this element.