sad-dev
sad-dev
I agree that without the collapse, it is probably going to lead to a lot of noise - especially when every free/return zero/increase ref count etc. function is mapped to...
Sorry, realized it might have been due to some seemingly unrelated changes I had made elsewhere while trying to fix some other format string bugs (oops!). I will reopen this...
Reopened as during the triage I discovered another bug in Ghidra
> Did you edit your original post to represent the new bug? Yes, the original post shows the new bug (the old being a false report)
I'm still in the middle of reversing the binary, but as far I can tell these are the only DSP instructions I have.
I extended ``addrmode3`` as follows: ``` addrmode3: [rn],-rm is P24=0 & U23=0 & c2122=1 & rn & c0811=0 & c0707=1 & c0404=1 & rm { local tmp=rn; rn=rn-rm; export tmp;...
> I think that it can be fixed without adding new constructors for `addrmode3`. Instead it is enough to tweak the constraints in constructors of post-indexed variations: > > https://github.com/NationalSecurityAgency/ghidra/blob/6842712129b8da45077bb8c5049e607d685f4dea/Ghidra/Processors/ARM/data/languages/ARMinstructions.sinc#L1024-L1044...
That sounds like a reasonable way to implement it while avoiding interfering with existing scripts that use the original ``execute``, thanks :)
Mine reads a pointer from f000 and tries to branch there. I was following this writeup at https://mahaloz.re/2022/09/23/0ctf22-rev.html a.) Get game.bin from https://github.com/shellphish/writeups/blob/main/challenges/rev/m68k/0CTF22-Vintage/game.bin b.) Load as Raw Binary, 6809, say...
A second thing that I'm not as sure about is the implementation of push and pull in SLEIGH:  It doesn't appear that pull1 and push1 are symmetric? Contrast with...