Andrey Turkin pancha@mail.nnov.ru writes:
I believe this is incorrect with regard to native Windows loader. As I already said, I've tried to change PointerToRawData field on some files with big FileAlignment and they load correctly if I or'ed them with some value in range 0..0x1FF. Files refuses to load if I or'ed PointerToRawData with 0x200 or 0x3FF!
It sounds like what we really need here is some test cases. It shouldn't be hard to write a test that creates temp files with various header values, tries a LoadLibrary on them and checks the resulting memory contents.