ghizard

Results 36 comments of ghizard

> > Yes, and I'm fact, also in the decompiler, that would be useful. > > Personally I would prefer less noise instead of more. I've spoken with @dragonmacher numerous...

Sorry for the delay on this. We are wondering if you have functionally witnessed an example program where this line has caused problems. We agree that the line is suspicious,...

From what you wrote above, I get the impression that you might not be aware of the complexity of how classes can get laid out in memory. A parent class...

I'm sorry that it wasn't clear as to which capability was legacy and which was new. > > If you are able to work with Ghidra source code, I can...

In master for 10.2 (https://github.com/NationalSecurityAgency/ghidra/commit/b7cea8247e0f6c2f9bbbeee0d8fb479a0765e9c6), I've incorporated a system property (see `ghidra.pdb.developerMode` in `launch.properties`) that can be turned on to enable the PDB developer mode options that can then be...

Will keep this ticket open for awhile, giving you time to get back to investigating this prototype work. Maybe 10.2 will be out by the time you have time to...

Register eax is the lower 32 bits of rax, so the instruction at 40111d is both reading and writing same register (in addition to reading memory), whereas for the instruction...

Is your failed_symbols.txt list from the post-analysis pop-up dialog? In other words, is Ghidra telling you that it cannot demangle these? Or are you gathering this list yourself? I think...

We believe that the label is being correctly demangled, but the program is not being updated with the result. This is most likely due to the function or the signature...

@Martmists-GH Are you able to do a build and run from source to test? If not, you might try running your script prior to other analysis. Keep in mind that...