symless icon indicating copy to clipboard operation
symless copied to clipboard

Automatic field typing

Open anOtherAnalyse opened this issue 2 years ago • 0 comments

Right now the only typed structure fields are:

  • __vftable pointers in structures;
  • methods members of vtables structures.

We could use IDA type information while propagating to automatically type more fields.

For example if we created a struc_A with a field field_c from the following assignement:

   A.field_c = "some_string";

We can guess that field_c type is char*, and automatically type it.

Or if we have the following call:

   fct(A.field_c);

And knowing fct prototype to be:

   void fct(char* str);

We can guess the same.

anOtherAnalyse avatar May 06 '22 14:05 anOtherAnalyse