search

trailofbits / binary_type_inference

GNU General Public License v3.0
15 stars 2 forks source link

Move subprocedure locators within BTI #11

Open 2over12 opened 2 years ago

2over12 commented 2 years ago

So currently we use the decompiler guesses of call parameters and returns for actual calls and then guessed params and returns for actual rets. We should analyze the locators ourself with more clever analyses. For actual calls, the rets would be reaching definitions from the callee that are used.

2over12 commented 2 years ago

This has been partially addressed by the fixup_returns analysis