Vector35 / Vector35/binaryninja-api

Functions using values from an enum do not have xref to the enum type

Open
#7,277 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Component: Core Effort: Medium Impact: Low Scenario: Malware
Dominant language
C++
Stars
1.3k
Forks
298
Avg merge
5d 5h
Merged PRs (30d)
19

Description

Steps to repro:

  1. Open the provided database
  2. Go to the enum API_names in the types view
  3. Add a new member with name LoadLibraryA and value 0x726774c
  4. Notice the API_resolver does not populate the LoadLibraryA name
  5. Re-analyze the load_wininet function, and see it does show up
Image

After manual re-analysis

Image

We are probably missing an analysis update not properly marking the function as needs update after we add the enum member

Database: boolean ice steps intently

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the provided database and reproduce the enum update in the types view, then compare the initial state with manual re-analysis of load_wininet. Trace how adding the API_names member affects API_resolver and function invalidation. Done means the LoadLibraryA name appears without manually re-analyzing the function.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
reverse-engineering
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.