binaryninja-api icon indicating copy to clipboard operation
binaryninja-api copied to clipboard

PE COFF Debug symbols are parsed incorrectly

Open d0mnik opened this issue 1 year ago • 4 comments

Version and Platform (required):

  • Binary Ninja Version: 3.5.4285-dev
  • OS: MacOS
  • OS Version: Ventura
  • CPU Architecture: M1

Bug Description: In IDA, function names are automatically being discovered (not FLIRT) that BN does not pick up. BN picks up some of the function names, but misses out on a few that was picked out by IDA.

Steps To Reproduce: Please provide all steps required to reproduce the behavior: Load the following binary in both IDA & Binary Ninja. binary.zip

Expected Behavior: In this particular case, a function at address 0x57db80 should be named as _FXCLI_DebugDispatch.

Screenshots:

In IDA: IDA-1 IDA-2

In Binary Ninja: BinaryNinja-POV

Notice how the function at 0x57db80is named as _FXCLI_DebugDispatch in IDA, but not in Binary Ninja

d0mnik avatar May 19 '23 06:05 d0mnik