Errors analyzing several ELF binaries
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 6.2k
- Forks
- 726
- Avg merge
- 11d 11h
- Merged PRs (30d)
- 7
Description
### Description
I've trying last released capa on several standard binaries from my Fedora 43 system but results are very disappointing.
### Steps to Reproduce
When doing _capa /bin/ls_ I get this result, which is shocking ("parse credit card information??")...
...but well, I could be. What it's not normal is that doing _capa /usr/bin/gimp_ , capa remains stuck indefinitely or doing _capa -v ./yr (where "yr" is this binary: https://github.com/VirusTotal/yara-x/releases/download/v1.10.0/yara-x-v1.10.0-aarch64-unknown-linux-gnu.gz) I get this fatal error:
**Expected behavior:**
I would like to see coherent results/no errors analyzing linux binary files. I think this scope (ELF files in general) needs a bit of your love. Thanks!
### Versions
Capa: 9.3.1
Kernel: 6.17.8-300.fc43.x86_64
Fedora: 43
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the capa /bin/ls, capa /usr/bin/gimp, and capa -v ./yr commands on Fedora 43 with capa 9.3.1, then inspect the reported errors and behavior. Done means ELF binaries produce coherent capability results without hanging or failing.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- reverse-engineering
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100