feat: only consider valid ascii bytes for pe dll names

vthib · Jun 6, 2024 · c219245 · c219245
1 parent 0023500
commit c219245
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/boreal/src/module/pe.rs b/boreal/src/module/pe.rs
@@ -1616,6 +1616,7 @@ fn add_delay_load_imports<Pe: ImageNtHeaders>(
 fn dll_name_is_valid(dll_name: &[u8]) -> bool {
     dll_name.iter().all(|c| {
         *c >= b' '
+            && *c <= 0x7e
             && *c != b'\"'
             && *c != b'*'
             && *c != b'<'