The analyzer must save any computed immediate values. Checking the immediate value is not sufficient, we can have : call *(rip + OFF) where rip + OFF = exit. This bug occurs often in PE.
This feature will be very useful to simulate the li instruction in MIPS. li is a pseudo instruction, it uses 2 other instructions (example ori + addiu).
The analyzer must save any computed immediate values. Checking the immediate value is not sufficient, we can have :
call *(rip + OFF)
where rip + OFF = exit. This bug occurs often in PE.This feature will be very useful to simulate the
li
instruction in MIPS.li
is a pseudo instruction, it uses 2 other instructions (example ori + addiu).