Broken IDA export script?

[Hamid-K]

Hi, It seems that the cwe_checker_to_ida.py script fails to properly generate output for IDA, when a valid JSON input file is supplied to the script. I have tested both latest and stable releases.

The result is the same regardless of provided json input, generated from different binaries. Ghidra v10.0 is installed on the system running the script. The json file loads fine in Ghidra and the plugin correctly highlights the findings, so it is not in a corrupt state.

Am I missing something?

This seems to be similar to a previously fixed and closed issue: https://github.com/fkie-cad/cwe_checker/issues/34

[Enkelmann]

Unfortunately, the IDA export script is just broken at the moment. Currently I do not have access to a version of IDA Pro to test any fixes due to working from home. And the free version of IDA does not support python scripting. So it may take some weeks until I can start working on fixing the script myself.

In the meantime any help in fixing the script would be greatly appreciated! Below is a list of problems with the current script (at least those that I am aware of):

• The json format used by the cwe_checker changed in the latest stable release. The IDA script still assumes the old format and thus ends up missing all CWE warnings.
• The list of CWEs in the IDA script is not up-to-date anymore.
• The addresses as reported by the cwe_checker use the same base offset as Ghidra uses when disassembling. This offset is likely different to the one IDA Pro uses. There is no function implemented to compute the difference in base offsets between Ghidra and IDA Pro.

[Enkelmann]

A short update on this: Most of the issues were fixed in PRs #279 and #281. It may still take some time until I can properly test everything to see whether some unfixed issues remain. I will leave the issue open until then.