frida-gum icon indicating copy to clipboard operation
frida-gum copied to clipboard

Architecture detection does not work on big endian targets.

Open WorksButNotTested opened this issue 5 years ago • 0 comments

This line assumes that the auxv contents are little endian.

https://github.com/frida/frida-gum/blob/b22ba0713086e990e20d729db4077bcc64c76f2a/gum/backend-linux/gumprocess-linux.c#L1812

Documentation states that: """ The format is one unsigned long ID plus one unsigned long value for each entry. The last entry contains two zeros. """

WorksButNotTested avatar Jul 15 '20 18:07 WorksButNotTested