'cannot map exception_rva (0x5e000) into offset' when parsing PE32+ library

[robbert-vdh]

Hi,

I've been using winedump to parse a whole bunch of Windows library files to check whether they export certain functions. This has been working fine, but shelling out for every file is a bit inefficient and it adds an external dependency. I've been meaning to replace this with goblin, but with one of the 700-ish files I've been parsing I'm getting this error:

Malformed entity: cannot map exception_rva (0x5e000) into offset

Problem is, it's happening with this VST2 plugin, and they don't provide a demo: https://joeysturgistones.com/products/gain-reduction-deluxe

I'm not sure if I can legally provide a small snippet from the binary , but I definitely can't upload the entire file.

How should I proceed? For now I'll probably add Winedump as a backup in case goblin can't parse the file, but I'd love get rid of the Winedump dependency entirely.

[m4b]

This may be what 9359fd0 was designed for; @robbert-vdh could you try out the parse_opt version by any chance?

[robbert-vdh]

With that option disabled I'm getting a bad offset 1467245907. No idea what would or should be at that offset though, don't have the time to really look into this at the moment. Presumably there's something funky going on with this binary, but both Wine as well as actual Windows can handle it just fine.

[m4b]

anyone want to test if this is still a bug?

[robbert-vdh]

I just tested the same file again with goblin 0.6.0 from crates.io, it still happens.

[ideeockus]

@robbert-vdh Hi! Can you provide information about PE sections? readpe -S or smth

I'm faced a similar problem, and I think the problem is probably in utils::find_offset