PDB static inspection #1994

New issue

Closed

opened 2026-10-16 21:13:10 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-16 21:13:10 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/morluto/rea/pull/447
Author: @morluto
Created: 7/28/2026
Status: ✅ Merged
Merged: 7/28/2026
Merged by: @morluto

Base: main ← Head: codex/pe-coff-inspection-362

📝 Commits (2)

94e6600 feat(pe): add broader PE/COFF/PDB static inspection
64f64fe Merge branch 'main' into codex/pe-coff-inspection-362

📊 Changes

2 files changed (+439 additions, -0 deletions)

View changed files

➕ src/domain/peInspection.ts (+225 -0)
➕ tests/peInspection.test.ts (+214 -0)

📄 Description

Summary

Expand PE/COFF/PDB inspection to cover imports, exports, resources, manifests, signatures, debug identifiers, sections, relocations, TLS callbacks, and architecture metadata.

Closes #362.

Changes

peInspection.ts: Domain schemas for PE manifests with sections, imports, exports, resources, debug entries, TLS callbacks, and relocations. Parsers for machine types (x86, x64, ARM, ARM64, IA-64), section characteristics flags, image characteristics, and debug directory types (COFF, CodeView, POGO).
PDB support: CodeView debug entries expose PDB GUID, age, and path for correlating with PDB files.
No macOS-only vocabulary: Public contracts use platform-neutral terms. Unsupported capabilities report "unknown" explicitly.

Verification

npm run typecheck   # passes
npx vitest run tests/peInspection.test.ts  # 9 tests pass

Acceptance criteria

✅ Public contracts do not expose macOS-only vocabulary
✅ Unsupported capabilities are reported explicitly ("unknown" machine type)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/morluto/rea/pull/447 **Author:** [@morluto](https://github.com/morluto) **Created:** 7/28/2026 **Status:** ✅ Merged **Merged:** 7/28/2026 **Merged by:** [@morluto](https://github.com/morluto) **Base:** `main` ← **Head:** `codex/pe-coff-inspection-362` --- ### 📝 Commits (2) - [`94e6600`](https://github.com/morluto/rea/commit/94e6600faf89436e4e2689fda8050792307b268d) feat(pe): add broader PE/COFF/PDB static inspection - [`64f64fe`](https://github.com/morluto/rea/commit/64f64fec30082e275d9e0acebcc973561812d7bb) Merge branch 'main' into codex/pe-coff-inspection-362 ### 📊 Changes **2 files changed** (+439 additions, -0 deletions) <details> <summary>View changed files</summary> ➕ `src/domain/peInspection.ts` (+225 -0) ➕ `tests/peInspection.test.ts` (+214 -0) </details> ### 📄 Description ## Summary Expand PE/COFF/PDB inspection to cover imports, exports, resources, manifests, signatures, debug identifiers, sections, relocations, TLS callbacks, and architecture metadata. Closes #362. ## Changes - **peInspection.ts**: Domain schemas for PE manifests with sections, imports, exports, resources, debug entries, TLS callbacks, and relocations. Parsers for machine types (x86, x64, ARM, ARM64, IA-64), section characteristics flags, image characteristics, and debug directory types (COFF, CodeView, POGO). - **PDB support**: CodeView debug entries expose PDB GUID, age, and path for correlating with PDB files. - **No macOS-only vocabulary**: Public contracts use platform-neutral terms. Unsupported capabilities report "unknown" explicitly. ## Verification ```bash npm run typecheck # passes npx vitest run tests/peInspection.test.ts # 9 tests pass ``` ## Acceptance criteria - ✅ Public contracts do not expose macOS-only vocabulary - ✅ Unsupported capabilities are reported explicitly ("unknown" machine type) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-16 21:13:10 +00:00

closed this issue
added the
pull-request
label

bsakaguchi referenced this issue

2026-10-31 00:59:42 +00:00

[PR #2112] [MERGED] docs(ghidra): verified macOS arm64 native decompiler build recipe #5036

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

morluto/rea#1994

No description provided.

Rows
Columns