-
Notifications
You must be signed in to change notification settings - Fork 462
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ironstrings: increase stack size #128
Conversation
@mr-tz On it |
The patch does seem to help for one function I think (though it may already have worked that way before too, or on some other versions of the sample I have). 0x1802b4d40 - It may have worked this way before too, found 3 strings while in manual analysis I was able to find much more. It seems like the emulator gets stuck on a condition or something and cannot reach all the code paths of the function.
Manual analysis string recovery results using a debugger and stepping through:
0x180138aa0 - Did not work at all like before, shows this recursion error Debug log file, contains a run on single function mode for all three previously problematic functions Overall I think this patch gave mixed results, and the strings that were recovered after the patch I think could already be recovered before and no new strings were discovered. Thanks a lot for working on this. |
Hm, my guess is that not all paths for
FWIW with the fix here I get the 3 strings you mention above vs. 0 before. |
@llebout, what happens if you increase the |
merging this as a small improvement, but it's a not a complete fix |
partly addresses #127
@llebout, can you test this fix on your side as well please?