-
Notifications
You must be signed in to change notification settings - Fork 464
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
ironstrings: increase stack size #128
Conversation
@mr-tz On it |
The patch does seem to help for one function I think (though it may already have worked that way before too, or on some other versions of the sample I have). 0x1802b4d40 - It may have worked this way before too, found 3 strings while in manual analysis I was able to find much more. It seems like the emulator gets stuck on a condition or something and cannot reach all the code paths of the function.
Manual analysis string recovery results using a debugger and stepping through:
0x180138aa0 - Did not work at all like before, shows this recursion error Debug log file, contains a run on single function mode for all three previously problematic functions Overall I think this patch gave mixed results, and the strings that were recovered after the patch I think could already be recovered before and no new strings were discovered. Thanks a lot for working on this. |
Hm, my guess is that not all paths for
FWIW with the fix here I get the 3 strings you mention above vs. 0 before. |
@llebout, what happens if you increase the |
merging this as a small improvement, but it's a not a complete fix |
partly addresses #127
@llebout, can you test this fix on your side as well please?