williballenthin / lancelot

intel x86(-64) code analysis library that reconstructs control flow
Apache License 2.0
101 stars 12 forks source link

error: address not mapped #195

Closed williballenthin closed 1 year ago

williballenthin commented 1 year ago

https://www.virustotal.com/gui/file/000123cde9feb4d8ba1def20e26b6d01116c0bb1b7bb8fdde3787de47ac0acee

2023-06-06 14:46:54 [DEBUG]  SafeSEH table count: 0x1000000
2023-06-06 14:46:54 [ERROR]  address not mapped

Stack backtrace:
   0: anyhow::error::<impl core::convert::From<E> for anyhow::Error>::from
             at /home/user/.cargo/registry/src/index.crates.io-6f17d22bba15001f/anyhow-1.0.71/src/error.rs:547:25
   1: <T as core::convert::Into<U>>::into
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/core/src/convert/mod.rs:716:9
   2: lancelot::pagemap::PageMap<T>::slice_into_split
             at ./core/src/pagemap.rs:311:24
   3: lancelot::pagemap::PageMap<T>::slice_into
             at ./core/src/pagemap.rs:376:13
   4: <lancelot::aspace::RelativeAddressSpace as lancelot::aspace::AddressSpace<u64>>::read_into
             at ./core/src/aspace.rs:143:9
   5: <lancelot::aspace::AbsoluteAddressSpace as lancelot::aspace::AddressSpace<u64>>::read_into
             at ./core/src/aspace.rs:311:9
   6: lancelot::aspace::AddressSpace::read_u32
             at ./core/src/aspace.rs:36:9
   7: lancelot::module::Module::read_rva_at_va
             at ./core/src/module.rs:92:29
   8: lancelot::analysis::pe::safeseh::find_pe_safeseh_handlers
             at ./core/src/analysis/pe/safeseh.rs:70:26
   9: lancelot::workspace::PEWorkspace::from_pe
             at ./core/src/workspace/mod.rs:115:32
  10: lancelot::workspace::workspace_from_bytes
             at ./core/src/workspace/mod.rs:395:25
  11: smoke::_main
             at ./bin/src/bin/smoke.rs:76:14
  12: smoke::main
             at ./bin/src/bin/smoke.rs:93:21
  13: core::ops::function::FnOnce::call_once
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/core/src/ops/function.rs:250:5
  14: std::sys_common::backtrace::__rust_begin_short_backtrace
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/std/src/sys_common/backtrace.rs:135:18
  15: std::rt::lang_start::{{closure}}
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/std/src/rt.rs:166:18
  16: call_once<(), (dyn core::ops::function::Fn<(), Output=i32> + core::marker::Sync + core::panic::unwind_safe::RefUnwindSafe)>
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/core/src/ops/function.rs:284:13
  17: do_call<&(dyn core::ops::function::Fn<(), Output=i32> + core::marker::Sync + core::panic::unwind_safe::RefUnwindSafe), i32>
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/std/src/panicking.rs:500:40
  18: try<i32, &(dyn core::ops::function::Fn<(), Output=i32> + core::marker::Sync + core::panic::unwind_safe::RefUnwindSafe)>
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/std/src/panicking.rs:464:19
  19: catch_unwind<&(dyn core::ops::function::Fn<(), Output=i32> + core::marker::Sync + core::panic::unwind_safe::RefUnwindSafe), i32>
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/std/src/panic.rs:142:14
  20: {closure#2}
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/std/src/rt.rs:148:48
  21: do_call<std::rt::lang_start_internal::{closure_env#2}, isize>
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/std/src/panicking.rs:500:40
  22: try<isize, std::rt::lang_start_internal::{closure_env#2}>
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/std/src/panicking.rs:464:19
  23: catch_unwind<std::rt::lang_start_internal::{closure_env#2}, isize>
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/std/src/panic.rs:142:14
  24: lang_start_internal
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/std/src/rt.rs:148:20
  25: std::rt::lang_start
             at /rustc/e6d4725c76f3b526c74454bc51afdf6daf133506/library/std/src/rt.rs:165:17
  26: main
  27: __libc_start_call_main
  28: __libc_start_main@@GLIBC_2.34
  29: _start
williballenthin commented 1 year ago
image