Vector35 / Vector35/binaryninja-api

Stack view does not determines usages of structure elements correctly

Open
#4,075 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Component: UI Effort: Medium Impact: High UI: Stack
Dominant language
C++
Stars
1.3k
Forks
298
Avg merge
5d 5h
Merged PRs (30d)
19

Description

Binary Ninja Version: 3.4.4090-dev Personal
Platform: Windows 11 Version 22H2

Stack view:
stack_view

HLIL:
hlil

As you can see from screenshots, even if dwFlags, hStdInput, hStdError, hStdOutput, wShowWindow did used in the HLIL, stack view does not detect them (so they are grayed out and says "Not used in current IL" on hover).

I guess it only detect the first used element in the structure. Because in other examples I can see that it only detects first used element and then left the others undetected. Probably it assumes first element of the structure is equal to structure itself in regards of referencing.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No source file, test, or entry point is named. Start by reproducing the reported structure usage in the Stack view and comparing it with the HLIL view, focusing on dwFlags, hStdInput, hStdError, hStdOutput, and wShowWindow. Done means every structure element used in HLIL is recognized by Stack view rather than shown as unused.

Written by the indexing model from the issue text.

Assessment

Domain
reverse-engineering
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.