pe: Support exception data for ARM64

[loewenheim]

Currently goblin supports exception data only for x86_64 PE files:

goblin/src/pe/mod.rs

Lines 265 to 267 in c029a2c

	if header.coff_header.machine == header::COFF_MACHINE_X86_64 {
	// currently only x86_64 is supported
	debug!("exception data: {:#?}", exception_data);

llvm-objdump also only supports PE unwind info for AMD64:

❯ llvm-objdump -u App_arm64.exe

App_arm64.exe_: file format coff-arm64
Unwind info:

llvm-objdump: error: unsupported image machine type (currently only AMD64 is supported).

How difficult would it be to extend this support to ARM64? Is it a question of documentation?

[kkent030315]

How difficult would it be to extend this support to ARM64?

It is not that difficult. IMO the ARM64's unwind info is well designed. I'd happy to write a parser for it whenever I got time to do.

https://learn.microsoft.com/en-us/cpp/build/arm64-exception-handling?view=msvc-170

[loewenheim]

Thank you, that is great to hear.

[m4b]

Sounds great! There might have been a closed / wip PR already for arm exceptions but maybe I’m misremembering. Might be worth checking ?

[kkent030315]

@loewenheim Id like to know why you need ARM64 unwind info. In addition what features are needed to achieve your purpose? (wild guess here, is that you are trying to gracefully handle crash report info aggregation in sentry.io?)

[loewenheim]

We need unwind info to stackwalk minidumps that are sent to Sentry.

[kkent030315]

ok... I have some progress. It is almost done but needs more unittests before going for PR.