Skip to content

[pull] main from VirusTotal:main#218

Merged
pull[bot] merged 4 commits into
threatcode:mainfrom
VirusTotal:main
May 14, 2026
Merged

[pull] main from VirusTotal:main#218
pull[bot] merged 4 commits into
threatcode:mainfrom
VirusTotal:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented May 14, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

plusvic added 4 commits May 14, 2026 10:45
Items in the type list are 16-bits values but were being parsed as 32-bits.
These are sanity checks against corrupted DEX files that can cause out-of-memory errors.
This commit refactors the DEX module parser to ensure strict compliance with the DEX specification, and resolve potential parsing failures on obfuscated or padded files.

* Refactored table parser signatures (`parse_strings`, `parse_types`, `parse_protos`, `parse_fields`, `parse_methods`, `parse_class_defs`) to eliminate intermediate `xxx_offset` remainder slices. Functions now receive the complete data buffer and `DexHeader`, returning `Vec` directly.
* Implemented absolute table offset lookups (`data.get(header.table_off..)`) across all table parsers instead of sequential `remainder` parsing. This prevents misalignment and out-of-bounds errors on DEX files containing section padding or rearranged tables.
@pull pull Bot locked and limited conversation to collaborators May 14, 2026
@pull pull Bot added the ⤵️ pull label May 14, 2026
@pull pull Bot merged commit 0d4795b into threatcode:main May 14, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant