search

NationalSecurityAgency / ghidra

Ghidra is a software reverse engineering (SRE) framework
https://www.nsa.gov/ghidra
Apache License 2.0
51.9k stars 5.89k forks source link

FunctionID Analyzer has disappeared #6812

Closed Wall-AF closed 3 months ago

Wall-AF commented 3 months ago

I created my own fidb a while back and used it successfully in the past. Now, the FunctionID analyzer has gone from the choice of analyzers and I can't figure out why, or how to retrieve it.

I noticed my file has the extension .fidb whereas Ghidra's defaults now have .fidbf, could that be related? If so, what's the fix?

Also, my applications are Windows NE exe's/dll's (16-bit protected-mode) built from a Borland C 4.02 (or thereabouts) compiler).

I'm using my own Ghidra version that I keep up-to-date as'n'when changes occur. I'm currrently based upon commit 34ba255.

ryanmkurtz commented 3 months ago

Start up a fresh Ghidra and get it to the point where you see the list of analyzers. Then, back out of that and go to the Front End GUI. Open up Help -> Runtime Information, and go to the Extension Points tab. Do you see FidAnalyzer in any of the 3 sub-tabs? If so, which ones? Be sure not to go into Runtime Information until after the list of analyzers has come up.

Wall-AF commented 3 months ago

FYI, before I closed my current session I checked those details an the FidAnalyzer was in the 1st & 2nd tabs but not in the 3rd. After closing the project, I closed Ghidra and started it again [^1]. It reopend (with my project, despite closing it before closing Ghidra) and I checked again and same result. However, this time I could see and run the FidAnalyzer. Wierd! [^1]: I'm always running Ghidra from within Eclipse.

ryanmkurtz commented 3 months ago

Ok, we can revisit this if the problem reappears and is reproducible.