Handle DWARF string sections larger than 2 GB

[David Quiceno (v-davidquiceno-ascendion)]

Summary

• Add a string-reader abstraction for DWARF string sections.
• Add the opt-in --dwarf-string-read-threshold CLI option.
• Use file-backed reads only when that option is supplied and the DWARF string section reaches the configured limit.
• Preserve the existing in-memory behavior by default and for sections below the configured limit.
• Add regression tests for reads beyond 2 GB and for the opt-in threshold behavior.

Root cause

ELFSharp materializes section contents in a byte array. Sections larger than int.MaxValue overflow when their size is converted to a 32-bit integer, preventing BinSkim from analyzing otherwise valid ELF binaries.

Validation

• All 154 Test.UnitTests.BinaryParsers tests passed.
• All 85 Test.UnitTests.BinSkim.Driver tests passed.
• The new CLI option is present in BinSkim analyze --help.
• The earlier custom-package validation successfully analyzed the affected Minecraft Switch artifact.

[James Moore (jamoor-moj)]

@microsoft-github-policy-service agree company="Microsoft"

[David Quiceno (v-davidquiceno-ascendion)]

@microsoft-github-policy-service agree company="Microsoft"