首页
社区
课程
招聘
[转帖]Hex-Rays v1.1 2009/06/12
发表于: 2009-7-21 21:36 4119

[转帖]Hex-Rays v1.1 2009/06/12

2009-7-21 21:36
4119
Hex-Rays v1.1 2009/06/12

BIG NEWS

+ floating point support
+ better 64-bit arithmetics support (instruction pairs are recognized better)
+ new analysis: live ranges of stack variables; reused slots are detected and properly handled (if not aliased)
+ __usercall with ellipsis is supported
NITPICKY DETAILS

+ slightly modified attachment of block comments. the new method is slightly better but the existing block comments on multiline binary operations may move from one operand to another:
+ decompiler distinguishes alisable and restricted (non-aliasable memory)
+ delphi overflow and range checks are hidden from the output
+ the "reset types" command can reset local or global types
+ slightly more aggressive stkvar elimination; unfortunately we can not eliminate unused stkvars completely in the presence of unknown or guessed function calls - if a function argument list is detected incorrectly, we risk deleting useful code
+ added rule: x=y,x => (x=y) != 0
+ decompiler generates less partial types
+ added parsing of function prototype line
+ local variable declarations are sorted: first are register variables sorted by basic blocks, then stack variables sorted by frame offets
+ added FOR-2 rule to create more for-loops
+ improved handling of 64bit operations
+ improved the decompiler engine to eliminate common subexpressions in some special cases
+ more aggressive cast removal: if the result of add/sub and similar operations is finally truncated, remove truncation casts for operands
+ added COERCE_... helper functions to convert int/float types when regular cast operations are not enough
+ better handling of 64-bit values in vararg arguments
+ better type casts for object references (decompiler was resolving types when it was not really necessary and replacing, e.g. LPSTR by char *)
FIXES

BUGFIX: WHILE-5 rule could duplicate a label and then interr
BUGFIX: tail calls to noreturn function were not marked as such
BUGFIX: right-clicking on the very first { could crash the decompiler
BUGFIX: "create new struct type" could create a type with void fields
BUGFIX: jo/jno instructions could hide some code from the listing
BUGFIX: decompiler would interr on too wide enums (>128bits)
BUGFIX: jo/jno instruction could hide executable code; added special handling for them and for delphi overflow checks
BUGFIX: decompiler could interr trying to create a variable of va_list type
BUGFIX: wrong decompilation output could be generated in some rare cases
BUGFIX: some sign-extension casts were missing
BUGFIX: array[(uchar)i8] could erroneously be represented as array[i8]
BUGFIX: decompiler was considering everything after any // in the output as comments
BUGFIX: rule19 to recognize 64bit multiplications could occasionally create wrong code and interr
BUGFIX: control flow after memset/memcpy could be rendered incorrectly
BUGFIX: decompiler could create a function that returns a value in edx register without returning anything in eax register
BUGFIX: decompiler could crash on some inputs

[课程]Linux pwn 探索篇!

收藏
免费 1
支持
分享
最新回复 (8)
雪    币: 716
活跃值: (162)
能力值: ( LV9,RANK:250 )
在线值:
发帖
回帖
粉丝
2
原以为有下载呢
2009-7-21 22:29
0
雪    币: 93908
活跃值: (200199)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
3
2009-7-21 22:35
0
雪    币: 8674
活跃值: (3848)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
4
我眼睛望穿了,看来是没戏了,感慨自己没钱啊!!!
2009-7-22 11:40
0
雪    币: 211
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
5
什么啊 英文的 看不懂
2009-7-29 23:23
0
雪    币: 2067
活跃值: (82)
能力值: ( LV9,RANK:180 )
在线值:
发帖
回帖
粉丝
6
lin是标题党
2009-7-29 23:26
0
雪    币: 93908
活跃值: (200199)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
7
Posted meaningful you do?
2009-7-30 01:00
0
雪    币: 93908
活跃值: (200199)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
8
It is very important Posted depressing it?
2009-7-30 01:02
0
雪    币: 206
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
9
看到这个,又兴奋了半秒,才回过神来,前几天看过。
唉,何时能用上?
2009-7-30 11:02
0
游客
登录 | 注册 方可回帖
返回
//