binaryninja-api icon indicating copy to clipboard operation
binaryninja-api copied to clipboard

File offset is off by 0x1000 for ELF x86-64 binary

Open ZetaTwo opened this issue 2 years ago • 0 comments

Version and Platform (required):

  • Binary Ninja Version: 3.1.3703-dev (Build ID 2713759a)
  • OS: Ubuntu Linux
  • OS Version: 22.04.01
  • CPU Architecture x64

Bug Description: Binary Ninja is off by 0x1000 in the file offset mapping in an ELF file. When looking at .data section of the attached binary, it claims that the variable password1 has offset 0x3010 in the file but in reality it is at offset 0x2010 as shown in a hex editor such as 010 Editor.

Steps To Reproduce: Please provide all steps required to reproduce the behavior:

  1. Open the attached ELF file
  2. Change the display to show file offset instead of address

Expected Behavior: I expect to see 0x2010 password1: but I see 0x3010 password1:

Screenshots:

offset1 offset2

Additional Information: Binary with the issue: offset-bug.zip

ZetaTwo avatar Sep 17 '22 21:09 ZetaTwo