rizinorg / cutter

Free and Open Source Reverse Engineering Platform powered by rizin
https://cutter.re
GNU General Public License v3.0
15.85k stars 1.15k forks source link

Cutter freeze on plugin execution #3261

Open devl00p opened 1 year ago

devl00p commented 1 year ago

Environment information

Cuter freeze on plugin execution

I recently participated to the Huntress CTF and one of the files to analyze was a Windows binary made using Golang.

Golang symbols didn't appear in Cutter so I used GoReSym to figure out some important functions names and renamed them manually.

Later I started to write a plugin for Cutter to automate the naming of functions but Cutter stop after having renamed ~ 45 functions (while there is a lot more) and the GUI is freezed.

I made my plugin write the function names to a txt fileto figure out the progress and indeed there is no more activity from Cutter so I have to kill the process.

To Reproduce

Steps to reproduce the behavior:

  1. Get the GoReSym binary

  2. Get the exe file from the attached DecryptMyFiles.zip file

  3. Get the python plugin file from the attached myplugin.zip file

  4. Move it to .local/share/rizin/cutter/plugins/python

  5. Load the exe file with Cutter and call the plugin from Windows > Plugin > Import Golang Symbols

Expected behavior

All function names found by GoReSym should appear in the function list on the left side of Cutter.

Cutter GUI should not freeze.

I hope it helps, I love the tool and I have been using it for several years :) Great job

XVilka commented 1 year ago

In part this should be solved by updating the Rizin submodule to the latest commit from dev, to include this commit: https://github.com/rizinorg/rizin/pull/3947