Function inlining makes HLIL and Disassembly sync hard to use
まだ誰も着手していません。
評価
- 難易度
- 5/5
- 見積もり時間
- 1週間以上
- 初心者へのやさしさ
- 25/100
- issue の種類
- バグ
- 明瞭さ
- 説明が足りない
- 活発さ
- 停滞
調査の方向性
Start by reproducing the synced HLIL and disassembly views described in issue #6763, especially with DYLD Shared Cache stub functions and inlining. Review related issues #6601 and #6737, then determine and document an expected synchronization behavior; the issue names no source files or tests, so completion requires an agreed design before implementation.
索引モデルが issue の本文から書いたものです。
説明
Version and Platform (required):
- Binary Ninja Version: 5.1.7320-dev (aa12054b)
- OS: macOS
- OS Version: 15.2
- CPU Architecture: M1
Bug Description:
I commonly have HLIL and disassembly linear view panes side by side and synced. Due to function inlining the disassembly view can end up being in a different function than the HLIL view. DYLD Shared Cache has lots of stub functions, which get inlined by the DSC plugin function workflow, so its very common in DSC binary views for there to be function inlining.
Due to the stub functions just being calls to other functions, this makes function calls in the HLIL almost always an inlined function. It can be the case that many lines in a row in the HLIL can just be inlined functions where a given function is making many function calls using function stubs. Therefore if you want to figure out what arguments are being passed to the function by looking at the disassembly, there's essentially nowhere you can click in the HLIL nearby to the call to see the disassembly for that call.
Binary Ninja has its issues so sometimes the disassembly is required for the source of truth. When I can't find a non-inlined location nearby in the HLIL, I end up having to go much further away from the call site to get the disassembly view to sync with the HLIL in the same function and then manually path my way through the disassembly to find the call. Which is not always a trivial process. Its not a show stopper but it does make life harder than it needs to be.
Expected Behavior:
To be honest I don't actually know. I created this issue to bring to light the problem but I don't have a solution to it at this moment in time. It makes sense what is happening but as a user it can be frustrating because its not what I want.
Maybe there could be some kind of setting, on a per-function basis, or just a global setting, to sync the disassembly view location with the location where the inlined function was inlined. So if in HLIL a call is highlighted that occurs in an inlined function, the disassembly view will be at the call instruction to the inlined function, not the function the inlined function calls.
Additional Information:
This is somewhat of a broader issue with function inlining. Its not the only problem as I also created issue #6601 and there is also #6737. I know these aren't quite related issues but it seems as great as function inlining is, its also causing a number of issues.
- 主要言語
- C++
- スター
- 1.3k
- フォーク
- 298
- 平均マージ
- 5日 5時間
- マージ済み PR(30日)
- 19
コントリビューションガイド
このリポジトリのコントリビューションガイドは索引されていません
はじめの一歩
- issue を最後まで読み、次にプロジェクトのコントリビューションガイドを読みます。
- 着手することを issue にコメントします — 二人が同じ作業をするのを防げます。
- リポジトリをフォークし、ブランチを切って変更します。
- issue 番号を参照したプルリクエストを送ります。
Vector35/binaryninja-api のほかの issue
-
難易度 1/5 1〜3時間 初心者へのやさしさ 88/100
Vector35/binaryninja-api#8540 ·
-
難易度 2/5 1〜3時間 初心者へのやさしさ 88/100
Vector35/binaryninja-api#8516 ·
-
難易度 1/5 1時間未満 初心者へのやさしさ 92/100
Vector35/binaryninja-api#8503 ·
-
難易度 1/5 1時間未満 初心者へのやさしさ 88/100
Vector35/binaryninja-api#8446 ·
-
難易度 1/5 1時間未満 初心者へのやさしさ 88/100
Vector35/binaryninja-api#8444 ·
Vector35/binaryninja-api の issue をすべて見る
似ている issue
-
難易度 1/5 1〜3時間 初心者へのやさしさ 92/100
autowarefoundation/autoware_universe#13413 ·
-
難易度 2/5 1〜3時間 初心者へのやさしさ 88/100
-
automated-analysis bug memory-safety
難易度 2/5 1〜3時間 初心者へのやさしさ 68/100
-
難易度 2/5 1〜3時間 初心者へのやさしさ 86/100
-
Sensor initialization takes very long when `--initial-sim-time` is set to current UNIX timestamp オープン
難易度 2/5 1〜3時間 初心者へのやさしさ 78/100
gazebosim/gz-sensors#662 · コメント 1 件 ·