TorgoTorgo / ghidra-findcrypt

Ghidra analysis plugin to locate cryptographic constants
https://gitlab.com/Torgo/ghidra_findcrypt
GNU General Public License v3.0
248 stars 23 forks source link

Fix database deserialization #3

Closed pdjstone closed 3 years ago

pdjstone commented 3 years ago

The latest version of database.d3v appears to have an extra 4-byte field before the buff_size field, which was causing the script to fail. I don't know what the value represents, but this one-line change fixes the script. With this change, the FindCrypt plugin still appears to work well.

TorgoTorgo commented 3 years ago

Thanks for the contribution! I've created an issue (#4) to track figuring out what that value is, but I'll merge this now.