search

mandiant / VM-Packages

Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
Apache License 2.0
123 stars 61 forks source link

IDA 8.4 crashes in FlareVM when running python scripts #1017

Closed emtuls closed 3 weeks ago

emtuls commented 2 months ago

What's the problem?

There was an issue raised from user feedback that IDA 8.4 may sometimes crash when running python scripts.

It was suggested from Igor that upgrading to Python 3.12 may fix this issue and per user feedback, this did seem to work.

@Ana06 We may want to look into making our default Python installation be version 3.12 to avoid this potential issue for other users.

Steps to Reproduce

Attempt to use python script with IDA Pro 8.4.

Environment

Environment Agnostic

Additional Information

No response

Detected by test suite

No

Ana06 commented 2 months ago

This looks to me like an IDA Pro bug (and not a FLARE-VM bug) related to the following mentioned in the release note:

BUGFIX: IDAPython: IDAPython would fail to initialize on Python 3.12 release due to missing 'imp' module

Updating to Python Python 3.12 may fix IDA Pro, but may break other tools and libraries. So, I think we should not try to fix this IDA bug in FLARE-VM. I think supporting only the latest IDA version in IDA python is an important IDA Pro bug and I expect IDA to resolve it fast.

Ana06 commented 3 weeks ago

The bug has been fixed in IDA Pro v8.4.240527 so I think we can close this issue.