Author Topic: GoLink 1.0.4.x updates  (Read 1596 times)

wjr

  • Member
  • **
  • Posts: 247
    • WJR's website
GoLink 1.0.4.x updates
« on: April 13, 2022, 10:03:48 AM »
GoLink – version 1.0.4.0 has the following changes:

  • modified to have standard section names .text .data
  • modified to have a standard IMAGE_DOS_HEADER and MS-DOS Stub Program
  • modified .idata section characteristics to 0C0000040h with no Import JMP Table present (by using CALL [...] for all imports)
  • modified with IMAGE_DLLCHARACTERISTICS_NX_COMPAT bit set
  • modified with IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE bit set
  • modified exception handler to show RVA instead of ASLR EIP
  • removed IMAGE_DEBUG_TYPE_MISC separate DBG file information
  • modified to output a standard IMAGE_DOS_HEADER and MS-DOS Stub Program
  • modified to output .idata section characteristics to 0C0000040h if no Import JMP Table present (by using CALL [...] for all imports)
  • added support for export forwarding
  • added some error messages for missing export symbol name and name too long conditions
  • fixed output of /files to show number of exports not named (instead of always none)
  • fixed error message to show for symbol defined more than once in multiple OBJ files

GoLink – version 1.0.4.1 has the following changes:
  • fixed problem with .bss section when also using section name $ suffix followed by text for section ordering
  • fixed a .bss only data section which output the previous "data" section name instead of ".data"
  • a couple of internal adjustments for better ".rdata" processing

GoLink – version 1.0.4.2 has the following changes:
  • fixed problem with /mix symbol undecoration when searching in first DLL listed for imports
  • modified with slightly better program flow for search of symbol in external DLL

GoLink – version 1.0.4.3 has the following change:
  • fixed problem with command line /entry symbol with trailing @## decoration not recognized

GoLink – version 1.0.4.4 now available here http://www.godevtool.com/Golink.zip with the following change:
  • added support for renamed export symbol

Although I added some support for export forwarding, given limited time and that this most likely will not get used frequently, it currently does not verify the availability of the forwarded to DLL or if the function exists within that DLL (GoAsm does not yet include support for the export forwarding syntax).

The internal changes also made it into GoAsm update 0.62.0.0, with the first item applying to GoAsm output (also using .rdata).
« Last Edit: March 08, 2023, 07:47:43 AM by wjr »

Gunther

  • Member
  • *****
  • Posts: 4197
  • Forgive your enemies, but never forget their names
Re: GoLink 1.0.4.x updates
« Reply #1 on: April 13, 2022, 10:41:24 AM »
Wjr,

thank you for your effort.  :thumbsup: The new version works well.
You have to know the facts before you can distort them.

wjr

  • Member
  • **
  • Posts: 247
    • WJR's website
Re: GoLink 1.0.4.x updates
« Reply #2 on: April 16, 2022, 07:43:53 AM »
Apparently I didn't get around to the intended internal GoAsm .idata modification. That change has been done in v0.62betaS, now available at the above link.

wjr

  • Member
  • **
  • Posts: 247
    • WJR's website
Re: GoLink 1.0.4.x updates
« Reply #3 on: May 10, 2022, 02:54:37 PM »
GoLink 1.0.4.1 update now available.

wjr

  • Member
  • **
  • Posts: 247
    • WJR's website
Re: GoLink 1.0.4.x updates
« Reply #4 on: August 11, 2022, 03:36:58 PM »
GoLink 1.0.4.2 update now available.

wjr

  • Member
  • **
  • Posts: 247
    • WJR's website
Re: GoLink 1.0.4.x updates
« Reply #5 on: March 02, 2023, 09:35:59 AM »
GoLink 1.0.4.3 update now available.

wjr

  • Member
  • **
  • Posts: 247
    • WJR's website
Re: GoLink 1.0.4.x updates
« Reply #6 on: March 08, 2023, 07:48:25 AM »
GoLink 1.0.4.4 update now available.

askm

  • Regular Member
  • *
  • Posts: 7
Re: GoLink 1.0.4.x updates
« Reply #7 on: March 29, 2023, 08:50:12 AM »
Some of your recent and past files are flagged possibly suspect according to the online summary scans.
Further the compiled files produced are as well.
All users need not to alarmed right?

Thanks.

jj2007

  • Member
  • *****
  • Posts: 13951
  • Assembly is fun ;-)
    • MasmBasic
Re: GoLink 1.0.4.x updates
« Reply #8 on: March 29, 2023, 01:24:01 PM »
False positives, i.e. there is no risk. Check the AV Software sh*t list sub-forum.

wjr

  • Member
  • **
  • Posts: 247
    • WJR's website
Re: GoLink 1.0.4.x updates
« Reply #9 on: April 08, 2023, 01:31:04 PM »
Correct, false positives, no need to get alarmed. On a certain site, I am totally aware of such flagging of the main Go tools by 1 to 5 out of 69 to 72 security vendors (and may even send off a few false positive reports).