Vector35 / Vector35/binaryninja-api
Pointer offset not utilised for getting call type of called function pointer field in struct
@rssor is already working on this.
Since Feb 9, 2026.
- Dominant language
- C++
- Stars
- 1.3k
- Forks
- 298
- Avg merge
- 5d 5h
- Merged PRs (30d)
- 19
Description
Version and Platform (required):
- Binary Ninja Version: 5.1.7360-dev (would guess still happens on 5.1.7501-dev)
- OS: macOS
- OS Version: 15.5 (24F74)
- CPU Architecture: M3
Bug Description:
The pointer offset is not utilised when getting call type of the called function pointer field in a struct. This results in the analyser discovering the wrong call type (the one at the field minus the pointer offset).
Steps To Reproduce:
Define a function pointer field that's called inside the code of the executable inside a structure with a pointer offset. Observe then how the function pointer type of the call will be the type of the field that's [pointer offset] bytes before the intended field.
Expected Behavior:
The call type should be the correct one.
Screenshots/Video Recording:
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.