00001 /* 00002 * Copyright (C) 2009 Sourcefire, Inc. 00003 * All rights reserved. 00004 * 00005 * Redistribution and use in source and binary forms, with or without 00006 * modification, are permitted provided that the following conditions 00007 * are met: 00008 * 1. Redistributions of source code must retain the above copyright 00009 * notice, this list of conditions and the following disclaimer. 00010 * 2. Redistributions in binary form must reproduce the above copyright 00011 * notice, this list of conditions and the following disclaimer in the 00012 * documentation and/or other materials provided with the distribution. 00013 * 00014 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS AS IS'' AND 00015 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 00016 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 00017 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 00018 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 00019 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 00020 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 00021 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 00022 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 00023 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 00024 * SUCH DAMAGE. 00025 */ 00026 00027 #ifndef __EXECS_H 00028 #define __EXECS_H 00029 00030 00031 00032 #include "bcfeatures.h" 00033 00038 struct cli_exe_section { 00039 uint32_t rva; 00040 uint32_t vsz; 00041 uint32_t raw; 00042 uint32_t rsz; 00043 uint32_t chr; 00044 uint32_t urva; 00045 uint32_t uvsz; 00046 uint32_t uraw; 00047 uint32_t ursz; 00048 }; 00049 00053 struct cli_exe_info { 00056 struct cli_exe_section *section; 00058 uint32_t offset; 00060 uint32_t ep; 00062 uint16_t nsections; 00063 void *dummy;/* for compat - preserve offset */ 00065 uint32_t res_addr; 00067 uint32_t hdr_size; 00069 }; 00070 00071 #endif