Vector35 / Vector35/binaryninja-api
"Non-code call target" warning on all calls to external functions
Nobody has claimed this yet.
- Dominant language
- C++
- Stars
- 1.3k
- Forks
- 298
- Avg merge
- 5d 5h
- Merged PRs (30d)
- 19
Description
I'm looking at some binaries on an embedded Linux ppc device. Across all binaries and libraries I've checked out, all call sites to external functions are marked with a "Non-code Branch" warning. The sites are all call instructions into .got_recovered_xxx sections, which are each 4 bytes long (though 8-byte-aligned), and show as all zeros in binaryninja. What is the correct behaviour here?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No source file, test, or entry point is named. Start by reproducing the warning on the embedded Linux PowerPC binaries and inspect how calls into the .got_recovered_xxx sections are classified. Done means establishing the expected behavior for these external-function call sites and resolving or documenting the incorrect warning.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp, linux
- Domain
- reverse-engineering
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100