nowsecure / r2frida

Radare2 and Frida better together.
MIT License
1.19k stars 121 forks source link

r2frida warning when hooking to process #203

Closed ethan-1106 closed 4 years ago

ethan-1106 commented 4 years ago

Please help me support the hooking issues of R2frida :(

Everytime i try to analysis the iOS Application with r2frida, it always return the following issue: r2 frida:///Headbook WARNING: r_bin_open_buf: assertion '(st64)opt->sz >= 0' failed (line 250)

Information note: Server - Client Frida version: 12.7.26

When installing the r2frida, i saw it get version 12.7.14. Is it the root cause of the client. I try to manually compile but that is not effective.

enovella commented 4 years ago

What about this? Please check the help usage and choose your election. The 2nd command is my suggestion.

$ r2 frida://?
$ r2 frida://spawn/usb//Headbook
ethan-1106 commented 4 years ago

Many thanks for your recommendation. 1 - use device id

Screen Shot 2019-12-17 at 10 34 27 PM
  1. as your suggestion: Screen Shot 2019-12-17 at 10 36 13 PM

I tried on all my devices : ipad mini 2 and iphone 6.

enovella commented 4 years ago

You don't have r2frida installed, do you?

Verify it with:

$ r2 -L|grep -i frida
rw_  frida    frida:// io plugin (MIT)
ethan-1106 commented 4 years ago

I already installed it as r2frida github recommendation.

Screen Shot 2019-12-17 at 11 30 01 PM
enovella commented 4 years ago

The iOS appname does not seem to be correct.

ethan-1106 commented 4 years ago

Dear enovella. This is an ctf mobile apps. I have just perform full step. Screen Shot 2019-12-18 at 4 42 22 PM

radare commented 4 years ago

Which version of r2 are you using?

On 18 Dec 2019, at 18:42, TheS0cialSheep notifications@github.com wrote:

 Dear enovella. This is an ctf mobile apps. I have just perform full step.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

trufae commented 4 years ago

This warning is because r2 is trying to parse a binary from memory of a 64bit address space in size which is obv not correct. Afaik this was fixed several months ago

On 17 Dec 2019, at 15:37, TheS0cialSheep notifications@github.com wrote:

 Please help me support the hooking issues of R2frida :(

Everytime i try to analysis the iOS Application with r2frida, it always return the following issue: r2 frida:///Headbook WARNING: r_bin_open_buf: assertion '(st64)opt->sz >= 0' failed (line 250)

Information note: Server - Client Frida version: 12.7.26

When installing the r2frida, i saw it get version 12.7.14. Is it the root cause of the client. I try to manually compile but that is not effective.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

ethan-1106 commented 4 years ago

Which version of r2 are you using? On 18 Dec 2019, at 18:42, TheS0cialSheep @.***> wrote:  Dear enovella. This is an ctf mobile apps. I have just perform full step. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

My Radare2 version: radare2 4.1.0-git 23289 @ darwin-x86-64 git.4.0.0-226-g89a5320e5 commit: 89a5320e5f918327f6f528fa325eeef6567932a8 build: 2019-12-16__11:27:08

ethan-1106 commented 4 years ago

This warning is because r2 is trying to parse a binary from memory of a 64bit address space in size which is obv not correct. Afaik this was fixed several months ago On 17 Dec 2019, at 15:37, TheS0cialSheep @.***> wrote:  Please help me support the hooking issues of R2frida :( Everytime i try to analysis the iOS Application with r2frida, it always return the following issue: r2 frida:///Headbook WARNING: r_bin_open_buf: assertion '(st64)opt->sz >= 0' failed (line 250) Information note: Server - Client Frida version: 12.7.26 When installing the r2frida, i saw it get version 12.7.14. Is it the root cause of the client. I try to manually compile but that is not effective. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

Hi trufae, my radare2 version is the lastest. So why is it still have a issues? Can you help me?

trufae commented 4 years ago

That's a harmless warning, you shouldnt be worried about it, everything should be working fine