ppt_parser: Accept one more non-standard version

Christian Herdtweck
1 parent a8258728
Showing 1 changed file with 2 additions and 1 deletions
oletools/ppt_record_parser.py
@@ -108,10 +108,11 @@ RECORD_TYPES = dict([
 ])
  
  
-# record types where version is not 0x0 or 0xf
+# record types where version is not 0x0 or 0x1 or 0xf
 VERSION_EXCEPTIONS = dict([
     (0x0400, 2),                       # rt_vbainfoatom
     (0x03ef, 2),                       # rt_slideatom
+    (0xe9c7, 7),    # tests/test-data/encrypted/encrypted.ppt, not investigated
 ])