horsicq/PDBRipper

XNTSV output incorrect for function pointers

jordan9001 opened this issue · 2 comments

The XNTSV output has incorrect names and types for function pointers.

                {
                    "name": "OpenRoutine)(union _LARGE_INTEGER )",
                    "offset": 56,
                    "size": 8,
                    "type": "unsigned char  ( *"
                }

An example function pointer members from _DUMP_INITIALIZATION_CONTEXT. Ideally name would be OpenRoutine, and type would be unsigned char ( * )(union _LARGE_INTEGER ).

Sorry, it is wrong to say that this output is wrong, as it depends on how you use it in your XNTSV tool. For consuming this as JSON elsewhere, though, it could be nice if the type and name were as described above.

Thsnks a lot for the report. I will take a look.