peview 0.2.3

A minimal and fast zero-copy parser for the PE32+ file format.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82

use crate::{dir::*, error::*, impl_from_bytes, mem::*};
use core::mem;

/// Attribute certificate
pub struct Certificate<'a> {
    head: &'a CertificateHead,
    data: ByteReader<'a>,
}

impl<'a> Certificate<'a> {
    pub fn new(bytes: &'a [u8], head: &'a CertificateHead) -> Self {
        Self {
            data: ByteReader::new(bytes),
            head,
        }
    }

    /// Returns the `revision` field of the [`CertificateHead`].
    pub fn revision(&self) -> u16 {
        self.head.revision
    }

    /// Returns the `typ` field of the [`CertificateHead`].
    pub fn typ(&self) -> u16 {
        self.head.typ
    }

    /// Returns a reference to the actual certificate data of this [`Certificate`].
    pub fn value(&self) -> &ByteReader<'a> {
        &self.data
    }
}

/// Iterator over the certificate table
pub struct CertificateTable<'a> {
    data: ByteReader<'a>,
}

impl<'a> Iterator for CertificateTable<'a> {
    type Item = Result<Certificate<'a>>;

    fn next(&mut self) -> Option<Self::Item> {
        match self.data.read::<CertificateHead>() {
            Ok(head) => {
                let data = &self.data.remaining_bytes()
                    [..head.length as usize - mem::size_of::<CertificateHead>()];

                self.data.skip_to(Pos::Rel(
                    algin_up(head.length as _, 8)
                        - mem::size_of::<CertificateHead>(),
                ));

                Some(Ok(Certificate::new(data, head)))
            }
            Err(Error::InsufficientBuffer) => None,
            Err(e) => Some(Err(e)),
        }
    }
}

impl<'a> DataDirectoryTable<'a> for CertificateTable<'a> {
    fn new(bytes: &'a [u8], _dir: &'a DataDirectory) -> Self {
        Self {
            data: ByteReader::new(bytes),
        }
    }

    fn typ() -> DataDirectoryType {
        DataDirectoryType::CertificateTable
    }
}

/// Native structure define by [MSDN](https://learn.microsoft.com/en-us/windows/win32/debug/pe-format#the-attribute-certificate-table-image-only)
#[derive(Clone, Copy)]
#[repr(C)]
pub struct CertificateHead {
    length: u32,
    revision: u16,
    typ: u16,
}

impl_from_bytes!(CertificateHead);