pe: add setters for iat_value/ilt_value

Author: romainthomas

api/python/src/PE/objects/pyImportEntry.cpp

@@ -75,11 +75,14 @@ void create<ImportEntry>(nb::module_& m) {
         &ImportEntry::hint,
         "Index into the :attr:`lief.PE.Export.entries` that is used to speed-up the symbol resolution"_doc)
 
-    .def_prop_ro("iat_value",
-        &ImportEntry::iat_value,
+    .def_prop_rw("iat_value",
+        nb::overload_cast<>(&ImportEntry::iat_value, nb::const_),
+        nb::overload_cast<uint64_t>(&ImportEntry::iat_value),
         "Value of the current entry in the Import Address Table. It should match the lookup table value."_doc)
 
-    .def_prop_ro("ilt_value", &ImportEntry::ilt_value,
+    .def_prop_rw("ilt_value",
+        nb::overload_cast<>(&ImportEntry::ilt_value, nb::const_),
+        nb::overload_cast<uint64_t>(&ImportEntry::ilt_value),
       R"doc(
       Original value in the import lookup table.
 

api/rust/cargo/lief/src/pe/import.rs

@@ -160,6 +160,18 @@ impl ImportEntry<'_> {
         self.ptr.ilt_value()
     }
 
+    /// Set the value of the current entry in the Import Address Table.
+    pub fn set_iat_value(&mut self, value: u64) -> &mut Self {
+        self.ptr.pin_mut().set_iat_value(value);
+        self
+    }
+
+    /// Set the original value in the Import Lookup Table.
+    pub fn set_ilt_value(&mut self, value: u64) -> &mut Self {
+        self.ptr.pin_mut().set_ilt_value(value);
+        self
+    }
+
     /// Raw value
     pub fn data(&self) -> u64 {
         self.ptr.data()

api/rust/include/LIEF/rust/PE/ImportEntry.hpp

@@ -33,6 +33,10 @@ class PE_ImportEntry : public AbstractSymbol {
 
   auto demangled_name() const { return impl().demangled_name(); }
 
+  void set_iat_value(uint64_t value) { impl().iat_value(value); }
+  void set_ilt_value(uint64_t value) { impl().ilt_value(value); }
+
   private:
   const lief_t& impl() const { return as<lief_t>(this); }
+  lief_t& impl() { return as<lief_t>(this); }
 };

doc/sphinx/_cross_api.rst

@@ -528,6 +528,18 @@
     :py:class:`lief.PE.ImportEntry`
     :cpp:class:`LIEF::PE::ImportEntry`
 
+.. |lief-pe-importentry-iat-value| lief-api:: lief.PE.ImportEntry.iat_value
+
+    :rust:method:`lief::pe::import::ImportEntry::iat_value [struct]`
+    :py:attr:`lief.PE.ImportEntry.iat_value`
+    :cpp:func:`LIEF::PE::ImportEntry::iat_value`
+
+.. |lief-pe-importentry-ilt-value| lief-api:: lief.PE.ImportEntry.ilt_value
+
+    :rust:method:`lief::pe::import::ImportEntry::ilt_value [struct]`
+    :py:attr:`lief.PE.ImportEntry.ilt_value`
+    :cpp:func:`LIEF::PE::ImportEntry::ilt_value`
+
 .. |lief-pe-importentry-iat-address| lief-api:: lief.PE.ImportEntry.iat_address()
 
     :rust:method:`lief::pe::import::ImportEntry::iat_address [struct]`

doc/sphinx/changelog.rst

@@ -57,6 +57,7 @@
 
 :PE:
 
+  * Add setters for |lief-pe-importentry-iat-value| and |lief-pe-importentry-ilt-value|
   * Add |lief-pe-binary-offset_to_rva| to convert a raw offset into a RVA
   * Update |lief-binary-offset_to_virtual_address| for PE binaries to
     return an **absolute** virtual address instead of a RVA (:issue:`1318`)

include/LIEF/PE/ImportEntry.hpp

@@ -82,12 +82,20 @@ class LIEF_API ImportEntry : public LIEF::Symbol {
     return iat_value_;
   }
 
+  void iat_value(uint64_t value) {
+    iat_value_ = value;
+  }
+
   /// Original value in the import lookup table.
   /// This value should match the iat_value().
   uint64_t ilt_value() const {
     return ilt_value_;
   }
 
+  void ilt_value(uint64_t value) {
+    ilt_value_ = value;
+  }
+
   /// Raw value
   uint64_t data() const {
     return data_;

tests/pe/test_imports_mod.py

@@ -340,6 +340,29 @@ def test_issue_multiple(tmp_path: Path):
     assert len(imp.entries) == 1
 
 
+def test_set_iat_ilt_value():
+    pe = lief.PE.parse(get_sample("PE/PE64_x86-64_binary_winhello64-mingw.exe"))
+
+    kernel32 = pe.get_import("KERNEL32.dll")
+    assert kernel32 is not None
+
+    entry = kernel32.entries[0]
+    original_iat = entry.iat_value
+    original_ilt = entry.ilt_value
+
+    entry.iat_value = 0xDEADBEEF
+    entry.ilt_value = 0xCAFEBABE
+
+    assert entry.iat_value == 0xDEADBEEF
+    assert entry.ilt_value == 0xCAFEBABE
+
+    entry.iat_value = original_iat
+    entry.ilt_value = original_ilt
+
+    assert entry.iat_value == original_iat
+    assert entry.ilt_value == original_ilt
+
+
 def test_import_front(tmp_path: Path):
     pe = lief.PE.parse(get_sample("PE/pe_reader.exe"))
     assert pe.imports[0].name == "KERNEL32.dll"