search

NationalSecurityAgency / ghidra

Ghidra is a software reverse engineering (SRE) framework
https://www.nsa.gov/ghidra
Apache License 2.0
51.13k stars 5.82k forks source link

Windows x86 PE RTTI Analyzer support for non Visual Studio PE files #90

Closed WasserEsser closed 5 years ago

WasserEsser commented 5 years ago

The Windows x86 PE RTTI Analzyer plugin only works for PE files compiled with Visual Studio.

image

When attempting to analyze RTTI information of other PE files, the following error message gets shown:

Windows x86 PE RTTI Analyzer> Couldn't get vf table address for RTTI 0 @ 3027a390. TypeDescriptor data type isn't valid at 3027a390 in Steam2.dll - .ProgramDB.

The error message in this particular case should be more descriptive until other compilers are supported. Support for other compilers would be great.

WasserEsser commented 5 years ago

I don't see how I can change the label from Bug to feature enhancement now that I have worked out what was causing the issue.

WasserEsser commented 5 years ago

Since people keep linking this issue, I'm going to close it. The issue report is wrong, there are lots of binaries compiled with VS that don't work.