capstone
capstone copied to clipboard
Recognize syscall instructions or interrupt numbers
Hey,
With x86/x64 instructions like int3, int 0x80 or syscall, we currently know if they are CS_GRP_INT instructions or not. However, it would be great to have one more instruction group: CS_GRP_SYSCALL AND MARK JUST int 0x80 and syscall into it.
An alternative could also be to know the interrupt number (well, except the syscall instruction I guess?) so one could recognize this information themselves.
I am not sure if this affects any other arch than x86/x64.