From f3dbed9af64096577d05b37a73f75df790b237c3 Mon Sep 17 00:00:00 2001
From: Christian Herdtweck <christian.herdtweck@intra2net.com>
Date: Thu, 9 May 2019 17:04:17 +0200
Subject: [PATCH] ppt_parser: Accept one more non-standard version

---
 oletools/ppt_record_parser.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/oletools/ppt_record_parser.py b/oletools/ppt_record_parser.py
index 56ea255..f8d54ea 100644
--- a/oletools/ppt_record_parser.py
+++ b/oletools/ppt_record_parser.py
@@ -108,10 +108,11 @@ RECORD_TYPES = dict([
 ])
 
 
-# record types where version is not 0x0 or 0xf
+# record types where version is not 0x0 or 0x1 or 0xf
 VERSION_EXCEPTIONS = dict([
     (0x0400, 2),                       # rt_vbainfoatom
     (0x03ef, 2),                       # rt_slideatom
+    (0xe9c7, 7),    # tests/test-data/encrypted/encrypted.ppt, not investigated
 ])
 
 
--
libgit2 0.21.4