Skip to content

WindowExecutableFileType/DOSHeaderType is specified incorrectly. #419

@rpiazza

Description

@rpiazza

In the DOSHeaderType, we have the following two properties/fields:

<xs:element name="reserved1" type="cyboxCommon:HexBinaryObjectPropertyType" minOccurs="0" maxOccurs="4">
    <xs:annotation>
           <xs:documentation>Specifies reserved words for the program (known in winnt.h as e_res[4]), usually set to zero by the linker. In this case, just use a single reserved1 set to zero; if not zero create four reserved1 with the correct value.</xs:documentation>
    </xs:annotation>
</xs:element>

and

 <xs:element name="reserved2" type="cyboxCommon:HexBinaryObjectPropertyType" minOccurs="0">
    <xs:annotation>
           <xs:documentation>Specifies reserved words for the program (known in winnt.h as e_res[10]), usually set to zero by the linker. In this case, just use a single reserved1 set to zero; if not zero create ten reserved1 with the correct value.</xs:documentation>
    </xs:annotation>
</xs:element>

In the doc for reserved2, it says in some cases there should be ten reserved1 values, but reserved1 is 0..4

Is 0..4 wrong, or should the doc for reserved2 say reserved2 and it be 0..10?

Google says the latter - https://en.wikibooks.org/wiki/X86_Disassembly/Windows_Executable_Files

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions