Demangled type names reference missing types

Open

#4,551 opened on Aug 8, 2023 6 comments 4 reactions 1 assignee View on GitHub

@plafosse is already working on this.

Since Apr 30, 2026.

Assessment

This issue has not been assessed yet.

Description

Component: Demangler Effort: Medium Impact: High

Version and Platform (required):

Binary Ninja Version: 3.5.4288-dev
OS: macOS
OS Version: 12.4
CPU Architecture: M1

Bug Description:
When the Demangler constructs a type from a name, it can create Named Type References to types that do not yet exist in the analysis. These types are not created even afterwards, leaving you with a bunch of broken type references to missing names. This is especially noticeable when loading a PDB with mangled names and stripped type information.

Steps To Reproduce:
Please provide all steps required to reproduce the behavior:

Grab the binary from https://github.com/Vector35/binaryninja-api/issues/4235
In the load options, disable pdb.features.createMissingNamedTypes (it is a workaround for PDBs for this bug)
Go to 0x140056c08
Try to navigate to the type of that variable
Notice it does not exist

Expected Behavior:
I expected types used in the analysis to exist, even if just as forward declared empty structures or something.

Screenshots:

This type does not exist.

Additional Information:
~~Demangler plugins #467 is blocking on this~~ Demangler plugins proceeded without fixing this haha

Dominant language: C++
Stars: 1.3k
Forks: 298
Avg merge: 5d 5h
Merged PRs (30d): 19

Contributor guide

No contributing guide indexed for this repository

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

Website Doc Typo Open

Difficulty 1/5 Under an hour Newbie friendliness 92/100

nasa/fprime#6007 · Opened Sep 21, 2026
RingOutlierFilterComponent never sets row_step on its output PointCloud2 (always 0) Open

Difficulty 1/5 1-3 hours Newbie friendliness 92/100

autowarefoundation/autoware_universe#13413 · Opened Sep 21, 2026
HTML export opens a span per character for system messages Open

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

Mudlet/Mudlet#10974 · 1 comment · Opened Sep 21, 2026
[Memory Safety] Memory Safety Analysis: artifact download blocked by network egress restrictions (run `#92`) Open

automated-analysis bug memory-safety

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

Z3Prover/z3#10883 · Opened Sep 21, 2026
Blank row in mpc.gencost reads past the start of the string Open

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

ORNL/GridKit#587 · Opened Sep 20, 2026

More C++ issues