Add build identity reads for PE, ELF and Mach-O - #142
Open
ero-qt wants to merge 4 commits into
Open
Conversation
ero-qt
force-pushed
the
binary-identity
branch
from
August 28, 2026 12:17
dc04aa6 to
fe899df
Compare
ero-qt
force-pushed
the
binary-identity
branch
from
August 28, 2026 12:24
fe899df to
7fedd82
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
First piece of #141: reading a module's build identity out of mapped memory, so offsets can later be keyed to exact builds instead of version heuristics.
pe::DebugId: GUID and age from the CodeView debug directory entry, the pair symbol servers key on.elf::build_id: theNT_GNU_BUILD_IDnote.macho::uuid: theLC_UUIDload command.Also introduces the first unit tests in the crate: a small mock host implementing the
envprocess imports over in-memory buffers, so the readers run against hand-laid images on the host.Since there's no precedent for tests here, happy to restructure if you'd prefer a different shape, like tests split into their own files or another home for the mock.