From 3f526ce406b551569ea69791e15caa1a377727af Mon Sep 17 00:00:00 2001 From: idiom Date: Thu, 7 Mar 2019 23:14:35 -0500 Subject: [PATCH] Update rtfobj to use the extension from the temp path of an embedded Package object. --- oletools/rtfobj.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/oletools/rtfobj.py b/oletools/rtfobj.py index 7179045..34a579a 100644 --- a/oletools/rtfobj.py +++ b/oletools/rtfobj.py @@ -880,7 +880,7 @@ def process_file(container, filename, data, output_dir=None, save_object=False): ole_column += '\nTemp path = %r' % rtfobj.temp_path ole_color = 'yellow' # check if the file extension is executable: - _, ext = os.path.splitext(rtfobj.filename) + _, ext = os.path.splitext(rtfobj.temp_path) log.debug('File extension: %r' % ext) if re_executable_extensions.match(ext): ole_color = 'red' -- libgit2 0.21.4