nowsecure / r2frida

Radare2 and Frida better together.
MIT License
1.18k stars 121 forks source link

command pdf can not work properly #277

Closed BurningTeng closed 8 months ago

BurningTeng commented 3 years ago
  1. Attach process r2 frida://BH93001BDE/com.asp.lovevideo
  2. Using \iE libImSDK.so~nativeDoBackground
  3. Using command pdf Error message is shown as below: p: Cannot find function at 0x76fdd59314
  4. Using pd, it can work

burning

enovella commented 3 years ago

You need to analyze function (af) before doing pdf

s offset
af
pdf // or pdg (if you installed r2ghidra-dec)
BurningTeng commented 3 years ago

I tried pdz related to r2retdec. It does not work. I will try pdz later.

[0x76fdd59318]> pdz decompilation error: Failed to load input file

trufae commented 3 years ago

pdz is not a valid command. why do you want to use pdz?

On 24 Nov 2020, at 18:15, BurningTeng notifications@github.com wrote:

I tried pdz. It does not work. I will try pdz later.

[0x76fdd59318]> pdz decompilation error: Failed to load input file

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/nowsecure/r2frida/issues/277#issuecomment-733119029, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABRCGG6PA5QIVYY7TMQTM2LSRPS35ANCNFSM4UBE7XVA.

BurningTeng commented 3 years ago

Command pdz is a command which is provided by r2Retdec plugin. It does not work.

I have tried pdg for decompiling. It works well. But when I use command pdf, following message will show. What is the meaning of following message? Linear size differs too much from the bbsum, please use pdr instead. Command pdr and pdg works well. burning

enovella commented 3 years ago

Try with r2ghidra-dec:

$ r2pm -ci r2ghidra-dec
$ r2 frida://BH93001BDE/com.asp.lovevideo
s `\iE @ libImSDK.so~+nativeDoBackground`
af
pdg
BurningTeng commented 3 years ago

Thanks very much. pdg works well.

But when I use command pdf, following message will show. What is the meaning of following message? Linear size differs too much from the bbsum, please use pdr instead.

burning

BurningTeng commented 3 years ago

I have another question, Is there any method to make first parameter to be type JNIEnv? burning

trufae commented 8 months ago

this is an issue in r2 not r2frida, lets move the issue in the other project instead