avast / avast/retdec

Suggestion from web: bad function pointer calls

Open
#180 0 comments 0 reactions 0 assignees View on GitHub
enhancement P-output
Dominant language
C++
Stars
8.6k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

[Binary](https://github.com/avast-tl/retdec/files/1703059/bin.zip) sent to us by user through https://retdec.com/.

**The original message:**
_Something seems to thow the MIPS decompiler way off track. See the main function of the attached file. It starts with various pairs calls to bzero, then strcpy. The decompiler recognizes the first pair, and the bzero of the second pair; after that, it just emits some assignments and function calls through pointers instead of the "real" calls. The varous comparisons and branches the function takes from 0x4072FC seem to be completely lost on it._

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the report with the attached binary and inspect the decompiler output for the main function, especially around address 0x4072FC. Compare the recognized bzero/strcpy calls with the emitted function-pointer calls and check whether the reported comparisons and branches are preserved. Done means the affected control flow and real calls are represented correctly.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
compilers, reverse-engineering
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.