strazzere/010editor-stuff

A collection of 010 Editor specific stuff

010editor-stuff's Issues

DEX Template Warning

When trying to use the DEX Template, 010 Editor shows a popup dialog and I'm unable to actually click on any option in the dialog. Only option is to force-quit 010 Editor. This happens every time. I cannot share the actual dex files I need to examine but I figured I'd report the issue anyways. Attached is a screenshot of the dialog.

Mach-O template Section64 "offset" type should be uint32

In the Mach-O template, the structure Section64 has an uint64 "offset" field:
https://github.com/strazzere/010Editor-stuff/blob/master/Templates/MachOTemplate.bt#L744

This Section64 is defined exactly the same with "section_64" in XNU header file:
https://opensource.apple.com/source/xnu/xnu-3248.60.10/EXTERNAL_HEADERS/mach-o/loader.h

However, in macOS's /usr/include/mach-o/loader.h, the section_64 was defined in a different way that "offset" is uint32_t. And there are three reserved fields appending other than two. LLVM project has the same definition:
http://llvm.org/docs/doxygen/html/Support_2MachO_8h_source.html

The MachOView used uint32_t for the field. Besides, I tried some real world samples, uint32 should be correct. By current uint64 template, __TEXT.__text's flag will be 0 and number of relocations will be a unreasonable huge number.

Bug in attribute_type enum

Email from user;

Thank you for your 010Editor templates.It's very usefull!!
I think there is an error in 'axml template.bt'.
STRING_TYPE = 0x10000008,INT_TYPE = 0x03000008.
There is a picture for you to check if it's wrong.

debug_info_off should deal correctly in the dex file template

there're some app packers set the debug_info_off filed to invalid value attentionly,such as 0xFFFFFFFF,we should deal this situation correctly.