keystone

keystone copied to clipboard

"Cannot find a symbol" is very unhelpful

13

I'm using Keystone as part of a compiler and I'm having trouble finding where the missing symbol exists in my 7000 lines of assembly. I'd definitely appreciate a way to...

lunixbochs

When installing keystone-engine via pip, binaries are not built when `cmake` is not installed, but build step is reported as "done": ```bash ▲ ~ pip3 install keystone-engine Collecting keystone-engine Using...

4ndv

relate https://github.com/keystone-engine/keystone/commit/622fe09217bb61cb15b1bfb9502e519614b9448f FIX: https://github.com/keystone-engine/keystone/issues/318 ADR and ADRP share the same `getAdrLabelOpValue`, but the imm calc is diffrent..

kkHAIKE

Hello, I'm currently using keystone as part of a project where binary executables are being analyzed. However, keystone fails when it encounters an "endbr64" opcode, failing with ``` File "/usr/local/lib/python3.10/dist-packages/keystone_engine-0.9.2-py3.10.egg/keystone/keystone.py",...

vm2p

Can we publish it on package manager so that we can use `apt install libkeystone-dev` to install it? Currently, pip's installation can't provide the essential file so that I can...

syheliel

Wrong disassembly with inline comments in assembly

4

When I use kstool to assemble the following instruction with a comment, I got an error: ``` $ kstool arm64 "MOV X29, SP ;hello" ERROR: failed on ks_asm() with count...

brendabrandy

```asm call test db 0x55,0x56,0x57; test: ``` ERROR: failed on ks_asm() with count = 0, error code = 514 (KS_ERR_ASM_MNEMONICFAIL)

llxiaoyuan

environment: `Python 3.11.8 (tags/v3.11.8:db85d51, Feb 6 2024, 22:03:32) [MSC v.1937 64 bit (AMD64)] on win32` `keystone-engine 0.9.2` (from pip) reproduce code: ```python import capstone import keystone def main(): ks =...

nyaoouo

i am working on some inline hook code like ``` jmp qword ptr [rip]; dq 0x7ffff8000; ``` but it seems not directly support variable in keystone i also want to...

nyaoouo

Absolute indirect jump

2

Is it possible to add (or use) absolute indirect jump using a sequence of bytes - FF 25 00 00 00 00 [8 bytes of address]? Example - jmp 0x123456789...

eXtreames