From: wgreathouse AT smva DOT com (William Greathouse)
Subject: Re: Little surprises inside of compiled files
15 Apr 1998 15:00:54 -0700
Message-ID: <35320DCC.23F74184.cygnus.gnu-win32@smva.com>
References: <199804112125 DOT VAA38826 AT out5 DOT ibm DOT net>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="------------FA4470E0367EC6219B07ED4B"
To: afn06760 AT afn DOT org
Cc: gnu-win32 AT cygnus DOT com

This is a multi-part message in MIME format.
--------------FA4470E0367EC6219B07ED4B
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

afn06760 AT afn DOT org wrote:
> 
> I have a MINGW32 compiled verison of the Midnight Commander file browser,
> and just accidentally was using it to view the contents of cygwin-compiled
> files in my /usr/local/bin directory, and I have found pieces of source
> code embedded in the middle of executables:
> 
..... Deleted sample for brevity ....
>

Try running peclean (attached) on the files.  This will zero fill the
empty areas and verify the .reloc section termination.

Enjoy,
Bill
--------------FA4470E0367EC6219B07ED4B
Content-Type: application/octet-stream; name="peclean.exe"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="peclean.exe"

TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAgAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4g
RE9TIG1vZGUuDQ0KJAAAAAAAAABQRQAATAEEADDwujMAAAAAAAAAAOAADwELAQI3AAoAAAAG
AAAACAAAQBAAAAAQAAAAIAAAAABAAAAQAAAAAgAABAAAAAEAAAAEAAAAAAAAAABQAAAABAAA
AAAAAAMAAAAAAAACABAAAAAAEAAAEAAAAAAAABAAAAAAAAAAAAAAAABAAABUAgAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC50
ZXh0AAAAjAgAAAAQAAAACgAAAAQAAAAAAAAAAAAAAAAAACAAAGAuYnNzAAAAAIwGAAAAIAAA
AAAAAAAAAAAAAAAAAAAAAAAAAACAAADALmRhdGEAAAAoAAAAADAAAAACAAAADgAAAAAAAAAA
AAAAAAAAQAAAwC5pZGF0YQAAVAIAAABAAAAABAAAABAAAAAAAAAAAAAAAAAAAEAAAMBFDIsU
EFJoqg8AAKEAAAAAUOgAAAAAg8QM6Q4CAABoAAAAAOhg9f//g8QEgz1cAAAAAA+O0AAAAItF
/FBqCKFcAAAAUGgAAAAA6AAAAACDxBCJRfCDffAHdyqLRfiNFIUAAAAAi0UMixQQUmjODwAA
oQAAAABQ6AAAAACDxAzpqQEAAJCQx0X0AAAAAItF9DkFXAAAAH8D62+Qi0X0UGjxDwAAoQAA
AABQ6AAAAACDxAyLRfSJwo0E1QAAAAC6AAAAAIsEEFBoBwIAAKEAAAAAUOgAAAAAg8QMi0X0
icKNBNUAAAAAugAAAACLRBAEUGgEEAAAoQAAAABQ6AAAAACDxAz/RfTrhZBmgz0GAAAAAA+O
CgEAAItF/FBqKA+/BQYAAABQaAAAAADoAAAAAIPEEIlF8IN98Cd3KotF+I0UhQAAAACLRQyL
FBBSaCAQAAChAAAAAFDoAAAAAIPEDOnJAAAAkJDHRfQAAAAAD78FBgAAADlF9HwG6aMAAACQ
i1X0idDB4AIB0I0UxQAAAACJ0AUAAAAAUOik7///g8QEaghoPBAAAItV9InQweACAdCNFMUA
AAAAidAFAAAAAFDoAAAAAIPEDInAhcB1JYtV9InQweACAdCNFMUAAAAAidAFAAAAAFCLRVWJ
5f81GDBAAGgUMEAAaBAwQABoDDBAAOi/BwAAycOQVYnlofRAQACjADBAAI1QIIkVBDBAAIPA
QKMIMEAAycNVieVT6KMHAADo0v///+it/////zUUMEAA/zUQMEAA/zUMMEAA6B4EAACJw+iD
BwAAU+j9BwAAi138ycNVieXovP///8nDifZDb3VsZCBub3QgYWxsb2NhdGUgYnVmZmVyCgBG
YWlsZWQgY2xlYXJpbmcgc2VjdGlvbiAlLS44cwoAifZVieWD7BSLRQyDeBQAD4ToAAAAi0UM
i1UMi0AUi1IIjQwCiU34i0UMi1UMi0AQi1IIicEp0YlN9IN99AAPjrkAAACLRfRQ6O0GAACD
xASJRfCDffAAdRloiBBAAKEIMEAAUOjZBgAAg8QI6YwAAACQi0X0UGoAi0XwUOjJBgAAg8QM
i0UIUOjFBgAAg8QEicCJRfxqAItF+FCLRQhQ6LYGAACDxAyLRQhQi0X0UGoBi0XwUOioBgAA
g8QQiUXsi0XsOUX0fheLRQxQaKMQQAChCDBAAFDoZgYAAIPEDGoAi0X8UItFCFDobAYAAIPE
DItF8FDocAYAAIPEBMnDSW52YWxpZCByZWxvYyBzZWN0aW9uIHRlcm1pbmF0aW9uCgBFcnJv
ciB1cGRhdGluZyB0YWJsZQoARml4ZWQhCgCJ9lWJ5YPsHFOLRQyLUAiJVeSLRQhQ6PcFAACD
xASJwIlF/GoAi0UMi1AUUotFCFDo5QUAAIPEDIN95AB/BumhAAAAkGoK6K8FAACDxASJRfCL
RQhQagpqAYtF8FDo0AUAAIPEEIlF9ItV8ItCBIPA+InCwfofidHB6R8ByInDwfsBiV3si0Xs
SI0URQAAAACNWgqJXeiLRehQi0XwUOiXBQAAg8QIiUXwi0UIUItF7EiNFEUAAAAAUmoBi0Xw
g8AKUOhrBQAAg8QQiUX0i0XwUOhUBQAAg8QEi0XoKUXk6VT///+LRQhQ6CUFAACDxASJwIlF
+GoK6P4EAACDxASJRfCLRQhQagpqAYtF8FDoHwUAAIPEEIlF9ItF8IN4BAB1DotF8IM4AHUG
6YgAAACQaMERQAChBDBAAFDowgQAAIPECGoAi0X4UItFCFDoyAQAAIPEDGoKagCLRfBQ6KgE
AACDxAyLRQhQaghqAYtF8FDorAQAAIPEEIlF9ItFCFDovQQAAIPEBIN99Ah0FmjkEUAAoQgw
QABQ6GQEAACDxAjrFJBo+hFAAKEIMEAAUOhOBAAAg8QIagCLRfxQi0UIUOhUBAAAg8QMi13g
ycNVc2U6ICVzIGZpbGUgLi4uCgByYisASEVMUABVbmFibGUgdG8gb3BlbiAlcwoARmlsZSBI
ZWFkZXIgcmVhZCBmYWlsZWQgZm9yICVzCgBPcHRpb25hbCBIZWFkZXIgcmVhZCBmYWlsZWQg
Zm9yICVzCgBEYXRhIERpcmVjdG9yeSByZWFkIGZhaWxlZCBmb3IgJXMKAFNlY3Rpb24gSW5m
byBmYWlsZWQgZm9yICVzCgAucmVsb2MAVYnlg+wQ6CkDAACDfQgBfyOLRQyLEFJo0BNAAKEI
MEAAUOhVAwAAg8QMuAEAAADpiAIAAJDHRfgBAAAAi0X4OUUIfwbpbwIAAJBo4hNAAItF+I0U
hQAAAACLRQyLFBBS6F8DAACDxAiJwIlF/IN9/AB1N2jmE0AA6E8DAACDxASLRfiNFIUAAAAA
i0UMixQQUmjrE0AAoQgwQABQ6NsCAACDxAzpBwIAAJBqAGiAAAAAi0X8UOjaAgAAg8QMi0X8
UGoYagFoZCZAAOjdAgAAg8QQiUXwg33wF3cpi0X4jRSFAAAAAItFDIsUEFJo/hNAAKEIMEAA
UOiAAgAAg8QM6awBAABmgz14JkAAAA+OkgEAAItF/FBqYGoBaAQhQADoiAIAAIPEEIlF8IN9
8F93KotF+I0UhQAAAACLRQyLFBBSaB4UQAChCDBAAFDoKwIAAIPEDOlXAQAAkIM9YCFAAAB+
S4tF/FBqCKFgIUAAUGgEIEAA6DMCAACDxBCJRfCDffAHdymLRfiNFIUAAAAAi0UMixQQUmhC
FEAAoQgwQABQ6NYBAACDxAzpAgEAAGaDPWomQAAAD47oAAAAi0X8UGooD78FaiZAAFBoZCFA
AOjYAQAAg8QQiUXwg33wJ3cqi0X4jRSFAAAAAItFDIsUEFJoZRRAAKEIMEAAUOh7AQAAg8QM
6acAAACQkMdF9AAAAAAPvwVqJkAAOUX0fAbpgQAAAJBqCGiBFEAAi1X0idDB4AIB0I0UxQAA
AACJ0AVkIUAAUOiLAQAAg8QMicCFwHUli1X0idDB4AIB0I0UxQAAAACJ0AVkIUAAUItF/FDo
CPv//4PECItV9InQweACAdCNFMUAAAAAidAFZCFAAFCLRfxQ6KP5//+DxAj/RfTpbv///4tF
/FDoLwEAAIPEBP9F+OmE/f//McDrAMnDifZVieXrDpCDwASjHDBAAItA/P/QoRwwQACDOAB1
6cnDkFWJ5VOLFXwYQACD+v91GjHSgz2AGEAAAHQPuIAYQACQg8AEQoM4AHX3idCFwHQWjRyF
fBhAAIsD/9CDw/yB+3wYQAB18WhIF0AA6LUAAACLXfzJw1WJ5YM9ACBAAAB1D8cFACBAAAEA
AADokf///8nDjXYA/yWsQEAAkJD/JfRAQACQkP8l8EBAAJCQ/yW0QEAAkJD/JdxAQACQkP8l
xEBAAJCQ/yXgQEAAkJD/JdRAQACQkP8l0EBAAJCQ/yXYQEAAkJD/JcxAQACQkP8lyEBAAJCQ
/yXoQEAAkJD/JbxAQACQkP8lwEBAAJCQ/yXkQEAAkJD/JexAQACQkP8luEBAAJCQ/yWwQEAA
kJD/JQBBQACQkP////8AAAAA/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/////iBhAACQw
QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAExAAAAAAAAA
AAAAADRCAACsQAAAoEAAAAAAAAAAAAAAREIAAABBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAIQQAAGEEAACRBAAAwQQAAPEEAAEhBAABQQQAAXEEAAGRBAABsQQAA
dEEAAHxBAACIQQAAlEEAAKBBAACsQQAAuEEAAMRBAADQQQAAAAAAAAAAAADYQQAAAAAAAAAA
AAAIQQAAGEEAACRBAAAwQQAAPEEAAEhBAABQQQAAXEEAAGRBAABsQQAAdEEAAHxBAACIQQAA
lEEAAKBBAACsQQAAuEEAAMRBAADQQQAAAAAAAAAAAADYQQAAAAAAAAEAX19HZXRNYWluQXJn
cwCVAGF0ZXhpdAAAAAAQAF9jZXhpdAAAAACmAGZjbG9zZQAAAACpAGZmbHVzaAAAAACwAGZv
cGVuALEAZnByaW50ZgAAALUAZnJlYWQAtgBmcmVlAAC6AGZzZWVrALwAZnRlbGwAvgBmd3Jp
dGUAAAAA5wBtYWxsb2MAAAAA7wBtZW1zZXQAAAAA8gBwZXJyb3IAAAAA+wByZWFsbG9jAAAA
FAFzdHJuY21wAAAANwBfZnByZXNldAAARQBfaW9iAABjAEV4aXRQcm9jZXNzAAAAAEAAAABA
AAAAQAAAAEAAAABAAAAAQAAAAEAAAABAAAAAQAAAAEAAAABAAAAAQAAAAEAAAABAAAAAQAAA
AEAAAABAAAAAQAAAAEAAAGNydGRsbC5kbGwAkBRAAABrZXJuZWwzMi5kbGwAjXYAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
--------------FA4470E0367EC6219B07ED4B
Content-Type: text/x-vcard; charset=us-ascii; name="vcard.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for William Greathouse
Content-Disposition: attachment; filename="vcard.vcf"

begin:          vcard
fn:             William Greathouse
n:              Greathouse;William
org:            SMV America
adr:            Engineering R&D;;8380 Darrow Road;Twinsburg;OH;44087;USA
email;internet: wgreathouse AT smva DOT com
title:          Senior Engineer, Project Leader
tel;work:       (330) 425-1340 x4006
tel;fax:        (330) 405-7684
note:           Personal Email: bgreat AT stratos DOT net
x-mozilla-cpt:  ;2
x-mozilla-html: FALSE
version:        2.1
end:            vcard


--------------FA4470E0367EC6219B07ED4B--


-
For help on using this list (especially unsubscribing), send a message to
"gnu-win32-request AT cygnus DOT com" with one line of text: "help".