capa analyzes Android ARM64 ELF .so as arch=unknown and returns no capabilities
Open
- Dominant language
- Python
- Stars
- 6.2k
- Forks
- 726
- Avg merge
- 11d 11h
- Merged PRs (30d)
- 7
Description
### Description
I am testing capa on Android native shared libraries extracted from an APK.
capa runs successfully on a small Android ARM64 ELF `.so`, but the analysis metadata reports:
```text
format: elf
os: android
arch: unknown
The run completes, but returns:
no capabilities found
Contributor guide
Research direction
Reproduce the issue by running capa against a small Android ARM64 ELF .so and inspect the reported format, OS, architecture, and capability output. Then trace the ELF architecture-detection and capability-analysis entry points. Done means the sample reports ARM64 rather than unknown and produces capabilities when present.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android
- Domain
- reverse-engineering, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 45/100