Vector35 / Vector35/binaryninja-api

Intermittent crash during auto-analysis after loading an image using the DSC plugin

Open
#6,518 6 comments 0 reactions 1 assignee View on GitHub

@emesare is already working on this.

Since Mar 24, 2025.

Effort: Trivial
Dominant language
C++
Stars
1.3k
Forks
298
Avg merge
5d 5h
Merged PRs (30d)
19

Description

Version and Platform (required):

  • Binary Ninja Version: 4.3.7094-dev (0f9d9b3f)
  • OS: macOS
  • OS Version: 15.2
  • CPU Architecture: M1

Bug Description:
A NULL pointer dereference (it would seem) is occurring during auto-analysis that is triggered when loading an image in the DSC. It doesn't seem to matter to much which image.

Steps To Reproduce:

  1. Load a copy of the DYLD Shared Cache in Binary Ninja.
  2. Wait for libsystem_c.dylib to finish loading and for auto-analysis to complete.
  3. Load the Foundation image.

I can only reproduce it when I have my plugin running which has some function workflow activities. It seems to happen 100% of the time when I follow the steps above. I'll see if I can figure out what function workflow work is being done that causes the crash if needs be.

Screenshots/Video Recording:
The following backtrace is where the crash occurs. This is on a function workflow advanced analysis thread.

___lldb_unnamed_symbol16373 (@___lldb_unnamed_symbol16373:418)
___lldb_unnamed_symbol5841 (@___lldb_unnamed_symbol5841:19)
___lldb_unnamed_symbol15247 (@___lldb_unnamed_symbol15247:158)
___lldb_unnamed_symbol16152 (@___lldb_unnamed_symbol16152:15)
___lldb_unnamed_symbol6689 (@___lldb_unnamed_symbol6689:20)
___lldb_unnamed_symbol29583 (@___lldb_unnamed_symbol29583:706)
___lldb_unnamed_symbol29611 (@___lldb_unnamed_symbol29611:101)
___lldb_unnamed_symbol29600 (@___lldb_unnamed_symbol29600:10)
___lldb_unnamed_symbol29856 (@___lldb_unnamed_symbol29856:18)
___lldb_unnamed_symbol27078 (@___lldb_unnamed_symbol27078:18)
___lldb_unnamed_symbol29255 (@___lldb_unnamed_symbol29255:850)
___lldb_unnamed_symbol29250 (@___lldb_unnamed_symbol29250:6)
_pthread_start (@_pthread_start:37)

Image

Additional Information:
Starting happening on more recent dev versions - probably at least 4.3.7060, but couldn't be 100% sure. It may actually be do with some changes I made to my own plugin rather than a Binary Ninja version.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.