[Mono-list] Bug in signcode? (Corrupts PE checksum)

JoelKatz davids at webmaster.com
Fri Nov 13 16:34:33 EST 2009


We recently tested using the Mono version of 'signcode' in place of
Microsoft's 'signtool'. While the signatures and timestamps checked out, we
noticed that the signed executable was failing PE checksum validation.

For example, file's signed by the Mono signcode fail this check:
http://msdn.microsoft.com/en-us/library/ms680355%28VS.85%29.aspx
The HeaderSum and CheckSum are unequal.

Details of the algorithm used can be found here:
http://www.codeproject.com/KB/cpp/PEChecksum.aspx

DS

-- 
View this message in context: http://old.nabble.com/Bug-in-signcode--%28Corrupts-PE-checksum%29-tp26325662p26325662.html
Sent from the Mono - General mailing list archive at Nabble.com.



More information about the Mono-list mailing list