search

evilsong / distorm

Automatically exported from code.google.com/p/distorm
GNU General Public License v3.0
0 stars 0 forks source link

movq mnemonic isn't defined #32

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?

Disassemble this byte stream in 64-bit mode:
"\x66\x48\x0f\x6e\xc2"; // movq

What is the expected output? What do you see instead?

I expect to see the "movq" instruction. I see "undefined" mnemonic instead.

What version of the product are you using? On what operating system?

diStorm 3.1 built on MacOS X 10.6.8.

Original issue reported on code.google.com by spa...@rotateright.com on 7 Feb 2012 at 5:41

GoogleCodeExporter commented 9 years ago 
http://code.google.com/p/distorm/source/browse/trunk/src/insts.c#1499
http://code.google.com/p/distorm/source/browse/trunk/src/insts.c#1500
http://code.google.com/p/distorm/source/browse/trunk/src/insts.c#1521
http://code.google.com/p/distorm/source/browse/trunk/src/insts.c#1522

Should these have the 3rd mnemonic option defined (as 3923)? Or maybe the code 
at:
http://code.google.com/p/distorm/source/browse/trunk/src/decoder.c#308

should be using opcodeId2?

Original comment by spa...@rotateright.com on 7 Feb 2012 at 5:45

GoogleCodeExporter commented 9 years ago 
A bug in disOps with empty mnemonics... Fixed.
Thanks for the report, it has means dups though.

Original comment by distorm@gmail.com on 4 Mar 2012 at 5:19

GoogleCodeExporter commented 9 years ago 
Issue 34 has been merged into this issue.

Original comment by distorm@gmail.com on 4 Mar 2012 at 5:19

GoogleCodeExporter commented 9 years ago 
That looks good:
$ ./a.out 66 48 0f 6e c2
   1: (   0) 66480f6ec2               MOVQ XMM0, RDX

Original comment by spa...@rotateright.com on 6 Mar 2012 at 5:25

GoogleCodeExporter commented 9 years ago 
Issue 46 has been merged into this issue.

Original comment by distorm@gmail.com on 5 May 2012 at 11:31