From c556697486817d399f1f5f825e23792f3eff24b1 Mon Sep 17 00:00:00 2001 From: Philippe Lagadec Date: Sun, 7 Feb 2016 16:04:34 +0100 Subject: [PATCH] olevba: KeyboardInterrupt is now raised properly in every function --- oletools/olevba.py | 54 +++++++++++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 53 insertions(+), 1 deletion(-) diff --git a/oletools/olevba.py b/oletools/olevba.py index 501fe49..00cfef1 100755 --- a/oletools/olevba.py +++ b/oletools/olevba.py @@ -160,13 +160,13 @@ https://github.com/unixfreak0037/officeparser # - improved logging, added -l option # 2016-01-31 PL: - fixed issue #31 in VBA_Parser.open_mht # - fixed issue #32 by monkeypatching email.feedparser +# 2016-02-07 PL: - KeyboardInterrupt is now raised properly __version__ = '0.42' #------------------------------------------------------------------------------ # TODO: # + option --fast to disable VBA expressions parsing -# + do not use logging, but a provided logger (null logger by default) # + setup logging (common with other oletools) # + add xor bruteforcing like bbharvest # + options -a and -c should imply -d @@ -187,6 +187,7 @@ __version__ = '0.42' # - extract_macros: convert to a class, split long function into smaller methods # - extract_macros: read bytes from stream file objects instead of strings # - extract_macros: use combined struct.unpack instead of many calls +# - all except clauses should target specific exceptions #------------------------------------------------------------------------------ # REFERENCES: @@ -778,6 +779,9 @@ def mso_file_extract(data): try: offset = struct.unpack_from('