[BUGFIX] If section Virtual Size is not filled, use Raw Size as Virtual

hasherezade · Feb 20, 2024 · bdae8c5 · bdae8c5
1 parent 06e63d4
commit bdae8c5
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/parser/pe/SectHdrsWrapper.cpp b/parser/pe/SectHdrsWrapper.cpp
@@ -266,6 +266,9 @@ bufsize_t SectionHdrWrapper::getMappedRawSize()
  return 0; // no changes
  }
  bufsize_t virtualSize = getContentDeclaredSize(Executable::RVA);
+ if (virtualSize == 0) { // if virtual size is not filled, use the raw size as virtual
+ virtualSize = getContentDeclaredSize(Executable::RAW);
+ }
  if (virtualSize < rawSize) {
  // if Virtual Size is smaller than the raw size, it means not full raw size will be mapped
  rawSize = virtualSize;
@@ -305,7 +308,10 @@ bufsize_t SectionHdrWrapper::getMappedVirtualSize()
  return 0; //invalid addr, nothing is mapped
  }
 
- bufsize_t dVirtualSize = getContentDeclaredSize(aType);
+ bufsize_t dVirtualSize = getContentDeclaredSize(aType); 
+ if (dVirtualSize == 0) {
+ dVirtualSize = getContentDeclaredSize(Executable::RAW);
+ }
  bufsize_t mRawSize = getMappedRawSize();
 
  bufsize_t mVirtualSize = (dVirtualSize > mRawSize) ? dVirtualSize : mRawSize;