Retdec incorrectly decompiles drivers for Windows
Open
- Dominant language
- C++
- Stars
- 8.6k
- Forks
- 1k
- PR merge metrics
- No merged PRs in 30d
Description
i.e. it fails to detect that a driver is a driver when `RegistryPath` is not used, as result it fails to detect that a pointer to `_DRIVER_OBJECT` is a pointer and correctly decompile the structures, as result it also ignores some code and fails to recognize that refs to funcs are refs.
Contributor guide
No contributing guide indexed for this repository
Research direction
No files or tests are named. Start by locating the Windows driver-detection logic and the handling of RegistryPath, _DRIVER_OBJECT, and function references; done means drivers are recognized without RegistryPath and their structures, code, and function references are decompiled correctly.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- operating-systems, reverse-engineering
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100