Re: [PATCH v2 1/5] elf2dmp: replace PE export name check with PDB name check

On Fri, 15 Sept 2023 at 18:02, Viktor Prutyanov wrote: > > PE export name check introduced in d399d6b179 isn't reliable enough, > because a page with the export directory may be not present for some > reason. On the other hand, elf2dmp retrieves the PDB name in any case. > It can be also used to c

[PATCH v2 1/5] elf2dmp: replace PE export name check with PDB name check

PE export name check introduced in d399d6b179 isn't reliable enough, because a page with the export directory may be not present for some reason. On the other hand, elf2dmp retrieves the PDB name in any case. It can be also used to check that a PE image is the kernel image. So, check PDB name when