Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-06 16:48:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Checkpoint

Browse source
This commit is contained in:
Seth Hall 2013-03-14 11:19:39 -04:00
parent ff2c2c7e52
commit b1f1b64dde
2 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/file_analysis/analyzers/PE.cc
View file

@ -7,7 +7,7 @@
using namespace file_analysis;
PE_Analyzer::PE_Analyzer(Info* arg_info)
: Action(arg_info)
: Action(arg_info, BifEnum::FileAnalysis::ACTION_PE_ANALYZER)
{
interp = new binpac::PE::File(this);
@ -25,10 +25,12 @@ Action* PE_Analyzer::Instantiate(const RecordVal* args, Info* info)
return new PE_Analyzer(info);
}
void PE_Analyzer::DeliverStream(const u_char* data, uint64 len)
bool PE_Analyzer::DeliverStream(const u_char* data, uint64 len)
{
Action::DeliverStream(data, len);
// Data is exclusively sent into the "up" flow.
interp->NewData(true, data, data + len);
return true;
}

2
src/file_analysis/analyzers/PE.h
View file

@ -18,7 +18,7 @@ public:
~PE_Analyzer();
virtual void DeliverStream(const u_char* data, uint64 len);
virtual bool DeliverStream(const u_char* data, uint64 len);
protected: