enlighten5

first you need to compile the plugin and generate the .so file then try `load_plugin /path/to/plugin.so`

Hi, To avoid the significant overhead introduced by the GUI, Lubuntu or pure TTY mode is recommended. To enter the TTY mode, you can start DECAF with `-monitor stdio` option,...

Hi, The problem is, there is a global list `module_name` containing the module info and a local list `module_list` for each process, both store the pointers to the module info....

Hi, Could you give more details about how do you find that the modules in decaf are not cleared? As far as I'm concerned, the module info belonging to the...

It's normal that the module info has been seen before since the same module is loaded from the global module list and is reusable. If you run a program for...

Hi, I think you are right. I noticed that this issue is only associated with 32-bit systems and compilers. It's most likely a bug in the compiler (specifically gcc-4.8 or...

Hi, The reason is, for the newer Linux kernel, some data structs are changed a little bit. I modified the procinfo.c file to make it compatible with the new kernel...

I think this can be avoided by calling the symbolic helper before generating INDEX_op_setcond_i32.

Yes, you are right. I thought the branch result is computed in the backend.

Hi, Currently, only kernel versions before 4.4 are supported. Since kernel data structures change during each update, the generic procinfo.c may not work for other kernel versions. You can modify...