fkie-cad / dewolf

A research decompiler implemented as a Binary Ninja plugin.
GNU Lesser General Public License v2.1
172 stars 9 forks source link

False control structure for structs #342

Closed github-actions[bot] closed 11 months ago

github-actions[bot] commented 1 year ago

MediumLevelILVarField is an instruction, which only accesses parts of register like eax.ah. The current code would incorrectly lift this as eax & 0x0000FF00 even though it should be (uint8_t)(eax >> 8).

closes #256