Browse code

Change errmsg to dbgmsg when skipping imphash on PE with no imports

Andrew authored on 2019/05/21 00:23:50
Showing 1 changed files
... ...
@@ -2423,8 +2423,10 @@ static unsigned int hash_imptbl(cli_ctx *ctx, unsigned char **digest, uint32_t *
2423 2423
     unsigned int err;
2424 2424
     int first = 1;
2425 2425
 
2426
+    /* If the PE doesn't have an import table then skip it. This is an
2427
+     * uncommon case but can happen. */
2426 2428
     if (peinfo->dirs[1].VirtualAddress == 0 || peinfo->dirs[1].Size == 0) {
2427
-        cli_errmsg("scan_pe: import table data directory does not exist\n");
2429
+        cli_dbgmsg("scan_pe: import table data dir does not exist (skipping .imp scanning)\n");
2428 2430
         return CL_SUCCESS;
2429 2431
     }
2430 2432