chizui/Il2CppInspectorRedux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ELF: Refuse to process dumped file if no image base supplied

Browse Source
This commit is contained in:
Katy Coe
2020-12-11 22:45:07 +01:00
parent 08c1559222
commit 8cdc8c8850
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
Il2CppInspector.Common/FileFormatReaders/ElfReader.cs
View File

@@ -7,7 +7,6 @@
using System; using System;
using System.Collections.Generic; using System.Collections.Generic;
using System.Diagnostics;
using System.IO; using System.IO;
using System.Linq; using System.Linq;
using System.Reflection; using System.Reflection;
@@ -197,6 +196,11 @@ namespace Il2CppInspector
} }
} }
// Dumped images must be rebased
if (isDumpedImage && !(LoadOptions?.ImageBase is ulong newImageBase)) {
throw new InvalidOperationException("To load a dumped ELF image, you must specify the image base virtual address");
}
// Get section name mappings if there are any // Get section name mappings if there are any
// This is currently only used to defeat the XOR obfuscation handled below // This is currently only used to defeat the XOR obfuscation handled below
// Note: There can be more than one section with the same name, or unnamed; we take the first section with a given name // Note: There can be more than one section with the same name, or unnamed; we take the first section with a given name