search

sashs / Ropper

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
https://scoding.de/ropper
BSD 3-Clause "New" or "Revised" License
1.87k stars 206 forks source link

Fix address length on 64 bit archs #127

Closed xairy closed 4 years ago

xairy commented 4 years ago

Currently it's set to 4, which results in stripped addresses for gadgets from kernel binaries, e.g. for arm64:

0x085bcec0: ldr x8, [x2, #0x250]; mov x0, x2; ldr x8, [x8, #0xc0]; blr x8;

This patch changes the length to 8, which results in:

0xffffff80085bcec0: ldr x8, [x2, #0x250]; mov x0, x2; ldr x8, [x8, #0xc0]; blr x8;

sashs commented 4 years ago

Oh, Thank you. :) Merged