Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

idb2pat fix bugs #97

Open
HongThatCong opened this issue Sep 18, 2020 · 4 comments
Open

idb2pat fix bugs #97

HongThatCong opened this issue Sep 18, 2020 · 4 comments
Assignees

Comments

@HongThatCong
Copy link

HongThatCong commented Sep 18, 2020

Hi William, I am TQN, the old author of idb2sig plugin.
I need to update my plugin, so I used your script to test the result and compared the resulting .pat files with IDA flair tool.
After some work, I found some bugs in the old plugin code.
So I have fix those bugs in your code. But it still have a small bug:
find_ref_loc will return BADADDR for the following sequence:

48 8D 05 29 06 00 00         lea     rax, `vtable for'loader_failure_t+10h

with:

  • dref_from = 0xC40
  • ref = 0x619

But in byte pattern is 0x0629 (29 06) because of +10h
Hope you have a time and fix it.
Thanks and best regards.
My code:
https://github.com/HongThatCong/idb2sig

@williballenthin
Copy link
Contributor

hey @HongThatCong thanks for reporting this issue! I'll look into the bug and try to make a fix here. thanks for your hard work over the years that enabled me to learn how FLIRT works.

@williballenthin williballenthin self-assigned this Sep 18, 2020
@HongThatCong
Copy link
Author

Thanks Willi,
My friend have fixed this bug, and I recently uploaded.
But still have a bug. It will failed on ARM. On x86 and x64, it run OK. The result match with IDA flair tool.
I will add the form for user choose the type of functions which created pat ???

@HongThatCong
Copy link
Author

HongThatCong commented Sep 21, 2020

Hi Willam.
I have fixed all known bugs.
Can you take a moment to test it.
I hope it will be updated to your code.
Sorry for my bad Python code and my English. I am Vietnamese.
Thanks and best regards...

@williballenthin
Copy link
Contributor

I'm glad we can communicate! Thank you very much for reaching out here :-)

I will take a look at your fork and try to merge the changes in here. I'll update this issue when this is done. Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants