joxeankoret / pyew

Official repository for Pyew.
GNU General Public License v2.0
383 stars 95 forks source link

missing basic blocks #15

Closed GoogleCodeExporter closed 7 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Analysis/Deepanalysis calc.exe (win xp sp0)
2. compare basicblocks found with pyew with IDA 

What is the expected output? What do you see instead?
 I found 26 basic blocks. should be 32 (4 which might be hard to catch (SEH blocks))

What version of the product are you using? On what operating system?
PYEW "1.2.0.0", ubuntu 12.04 64bit 

Please provide any additional information below.
it misses a short jump @ addr 0x010124c8 to basicblock @ 0x010124d8
and a short jump @ addr 0x010125cd to basicblock @ 0x010125dd

both jumps have same offset 0x0e: opcode EB 0E

Original issue reported on code.google.com by Mats.Sme...@gmail.com on 7 May 2013 at 1:28

GoogleCodeExporter commented 9 years ago
Interesting bug. Thanks for reporting! I'll fix it this weekend. BTW, it would 
be cool if you could share the file (I don't have a Win XP SP0 at hand).

Original comment by joxean.p...@gmail.com on 7 May 2013 at 1:33

GoogleCodeExporter commented 9 years ago
OK, I noticed where the problem is but I'll need some time to fix it. Thanks 
for sharing the file and for reporting it!

Original comment by joxean.p...@gmail.com on 17 May 2013 at 7:39

GoogleCodeExporter commented 9 years ago
The changes are not public yet, but it seems that with the new disassembler 
engine (capstone) this problem should be fixed.

I'll update the bug report as soon as I have more information about the new 
version.

Original comment by joxean.p...@gmail.com on 9 Dec 2013 at 11:03