From b1f1b64ddea74d87dec665238ce7d02e58e1e243 Mon Sep 17 00:00:00 2001 From: Seth Hall Date: Thu, 14 Mar 2013 11:19:39 -0400 Subject: [PATCH] Checkpoint --- src/file_analysis/analyzers/PE.cc | 6 ++++-- src/file_analysis/analyzers/PE.h | 2 +- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/src/file_analysis/analyzers/PE.cc b/src/file_analysis/analyzers/PE.cc index 66954ffa3e..622cbb945f 100644 --- a/src/file_analysis/analyzers/PE.cc +++ b/src/file_analysis/analyzers/PE.cc @@ -7,7 +7,7 @@ using namespace file_analysis; PE_Analyzer::PE_Analyzer(Info* arg_info) - : Action(arg_info) + : Action(arg_info, BifEnum::FileAnalysis::ACTION_PE_ANALYZER) { interp = new binpac::PE::File(this); @@ -25,10 +25,12 @@ Action* PE_Analyzer::Instantiate(const RecordVal* args, Info* info) return new PE_Analyzer(info); } -void PE_Analyzer::DeliverStream(const u_char* data, uint64 len) +bool PE_Analyzer::DeliverStream(const u_char* data, uint64 len) { Action::DeliverStream(data, len); // Data is exclusively sent into the "up" flow. interp->NewData(true, data, data + len); + + return true; } diff --git a/src/file_analysis/analyzers/PE.h b/src/file_analysis/analyzers/PE.h index 34840c0e3b..d511f3e9bf 100644 --- a/src/file_analysis/analyzers/PE.h +++ b/src/file_analysis/analyzers/PE.h @@ -18,7 +18,7 @@ public: ~PE_Analyzer(); - virtual void DeliverStream(const u_char* data, uint64 len); + virtual bool DeliverStream(const u_char* data, uint64 len); protected: