ampotos / dynStruct

Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone
MIT License
314 stars 34 forks source link

Inner structure detection #14

Open ampotos opened 8 years ago

ampotos commented 8 years ago

Using https://github.com/ampotos/dynStruct/issues/5 to check if a base value is in the same block but different of the start of the block say this member is on a inner structure or an inner array.

This will allow the structure recovery process to detect inner structures and array in a more accurate way. The size of the inner structure or array may be found by looking for the first member which don't use the same base value when being accessed.

When this will be done the actual array detection will be removed as well as the minimum size to be an array.