On 01/26/2016 11:10 PM, Vincent Povirk wrote:
I checked ecma-335, and sadly the flag isn't documented there. How did you find out about it?
I was googling for "pe32+ IMAGE_COR20_HEADER" and "pe32+ mono dump IMAGE_COR20_HEADER". The search gives this, for instance: https://forum.tuts4you.com/topic/26862-net-directory-flags/#comment-127000
Before googling this, I made sure that init routine is called or not by inserting crashes in the app init routines and thus detecting if the routine is called under Mono & .Net (all under Wine). I initially suspected that this is somehow called from managed ctor, but it appeared to be not the case. I searched for these words being curious how .Net gets this entry point address while it is not in exports and normal PE entry point.
Well, pretty much any change in behavior could cause a regression. Unless there's something else that we should fix first (because programs will start using it), I wouldn't worry about it.
So then I will split this patch into two or three, look couple of times more and send it.
Thanks, Paul.