capstone icon indicating copy to clipboard operation
capstone copied to clipboard

Recognize syscall instructions or interrupt numbers

Open disconnect3d opened this issue 3 years ago • 0 comments

Hey,

With x86/x64 instructions like int3, int 0x80 or syscall, we currently know if they are CS_GRP_INT instructions or not. However, it would be great to have one more instruction group: CS_GRP_SYSCALL AND MARK JUST int 0x80 and syscall into it.

An alternative could also be to know the interrupt number (well, except the syscall instruction I guess?) so one could recognize this information themselves.

I am not sure if this affects any other arch than x86/x64.

disconnect3d avatar Jul 16 '22 15:07 disconnect3d