qira icon indicating copy to clipboard operation
qira copied to clipboard

Published 20 hours ago • verified publisher icon geohot

Support thumb bit recovery in static

Open nedwill opened this issue 9 years ago • 2 comments

We should be able to track the thumb bit statically with some success, like IDA does. The current thumb hacks are brittle and don't really belong in QIRA.

nedwill avatar Mar 21 '15 20:03 nedwill

So after some consideration, it might be a good idea to do this as a BAP plugin and then export the information over to QIRA. This would be a good use case for getting familiar with the BAP/Python communication which quite honestly I think only Ivan really understands ATM.

nedwill avatar Mar 24 '15 15:03 nedwill

Ivan is certainly the expert on this, but the plugin isn't scary at all. There are a few small idioms that will make you more productive, but they shouldn't be hard to learn.

dbrumley avatar Mar 24 '15 17:03 dbrumley