ev-flow / ev-flow/quark-engine

Class names are truncated when analyzing with Rizin

Open
#331 0 comments 0 reactions 1 assignee Claimed by @haeter525 View on GitHub
issue-processing-state-06
Dominant language
Python
Stars
1.7k
Forks
218
Avg merge
4d 12h
Merged PRs (30d)
7

Description

**Describe the bug**

For now, the Rizin-based analysis library relies on a field called `flagname` (from the Rizin command `isj`) to get the class name of a method. However, this field has a length limitation of its value. Thus, when any method exceeds that limitation, it may cause Quark to receive a broken class name.

![Truncated_class_name](https://user-images.githubusercontent.com/3461569/164566041-d5f3c965-5500-4eed-9edc-a274fc931344.png)
> Part of the analysis output of 13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk using the Rizin-based analysis library.
> Quark warns that the class names of some methods are truncated.

**To Reproduce**

```bash
quark -a 13667fe3b0ad496a0cd157f34b7e0c991d72a4db.apk --core-library -s
```

**Expected behavior**

Use a reliable API in Rizin to get the class name of a method.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.