Ghidra 10.4 Change History (September 2023) New Features
Analysis. Swift Type Metadata is now marked up. (GP-2085) FileSystems. Added cramfs support. (GP-3328) FileSystems. The File System Browser now supports the Add To Program action. (GP-3730) Importer. Created parsers and analyzers for Device Tree Blob (DTB) and Flattened Device Tree (FDT) binaries. (GP-1436) Listing. Added ability to reduce an instructions length to facilitate overlapping instructions. This can now be accomplished by specifying an instruction length override on the first instruction and disassembling the bytes which follow it. The need for this has been observed with x86 where there may be a flow around a LOCK prefix byte. (GP-3256)
Ghidra 11.0.3 Change History (April 2024) Improvements
Decompiler. Fixed v850 Decompiler treatment of global GP and TP registers as separate registers. (GP-4479, Issue #3515) Languages. Added thunk patterns for use of BTI C/CJ instruction at start of AARCH64 thunk functions. (GP-3917) Processors. Added p0/p8 registers as prefer split to Tricore.cspec (GP-4507, Issue #3515) Bugs
Build. Corrected build problem that causes module src.zip files to be omitted from distribution when a externalGhidraExtension is present. This did not impact the current Public release since it does not include any such modules. (GP-4492) Decompiler. Fixed bug causing switch analysis to lay down jump tables with extra entries. (GP-4416) Processors. Fixed regression in Tricore calling convention for parameters and returns that are a smaller datatype than the full register size. (GP-4468, Issue #6354) Scripting. Fixed NullPointerException in the RecoverClassFromRTTIScript that happened for Windows programs when a class had a hierarchy at least four levels deep, with a single inheritance chain, and with the root being a virtual class. (GP-4459, Issue #6348) Version Tracking. Corrected potential Exception within address correlators that check function parameters. (GP-4490)