qiling
qiling copied to clipboard
A True Instrumentable Binary Emulation Framework
***Describe the bug** When debugging an arm32 binary with inbuilt gdb feature in qiling framework, I noticed that when hitting a breakpoint, the `pc` register showed in remote gdbserver is...
I get an error while emulating following MSVC++ code on Linux: std::cout
ql_syscall_fstat relies on os.fstat. On a WSL2 host, it returns a 64 bit inode if the rootfs is located on a NTFS partition. Qiling will crash when packing it into...
***Describe the bug** eapAlloc(hHeap = 0x5000000, dwFlags = 0x0, dwBytes = 0x20) = 0x5025e44 HeapAlloc(hHeap = 0x5000000, dwFlags = 0x0, dwBytes = 0x20) = 0x5025e64 HeapAlloc(hHeap = 0x5000000, dwFlags =...
***Describe the bug** ```bash (py37) location>python ql.py [+] PageZero Size: 100000000 [+] ProcEntry: 0x1000 [+] Dyld entry point: 0x500001000 [+] Binary Entry Point: 0x100000CD0 thread_selfid() = 123 mprotect(0x500092000, 0x5000, 0x1)...
***Describe the bug** hook_LoadLibraryExA failed **Error Report** SetErrorMode(uMode = 0x8001) = 0x0 GetVersion() = 0x40004 GetModuleHandleA(lpModuleName = "KERNEL32") = 0x10551000 GetProcAddress(hModule = 0x10551000, lpProcName = "SetDefaultDllDirectories") = 0x106110d8 SetDefaultDllDirectories(DirectoryFlags =...
***Describe the bug** I use qiling emulate arm_android linker64, it worked. But when I emulate arm_android linker32, it gave an error. **Result** ``` [+] Enable ARM VFP [+] Set init_kernel_get_tls...
Hi, I tried to emulate a ARM ELF binary with the qiling framework. The binary depends on the libstdc++.so library, which seems to branch to the address 0xffff0fc0 in several...
***Describe the bug** I'm just trying to confirm that this behavior is what I think it is. I pulled all of the DLL's the program I'm playing with depends on...
***Describe the bug** I notice that MIPS defines the call number as 17, while hook_intr_cb's intno gives 26 Relevant logs are as follows: [+] load 0x400000 - 0x40f000 [+] load...