1

I'm using radare2 and I've noticed that it simply prints function offsets rather than function names.

I've done some tests and I've discovered that on Kali it prints offsets and on debian it prints names.

Here you can see how r2 behaves in Kali: raadre2 on kali linux showing only call 0x0ffset

It is, for example, printing call 0x4ce645 insted of call reloc.puts_WhatEver. When I inspect ELF properties, I can see that function names are indeed located at that offset. readelf -r

I don't really know what is making r2 behave that way. Here is some info about Kali environment I'm using. kali environment settings

On the other hand, when using r2 on Debian and debugging the exact same file I can prefectly see function names.

function name printing in debian

Here is some info about Debian environment I'm using. Debian environment settings

The file I'm debugging in both Kali and Debian is exactly the same. enter image description here enter image description here

How could I get r2 to behave in Kali exactly the same way it is behaving in Debian?

  • 1
    Do you use the latest version of radare2? To check, please share the output of r2 -v. The latest version is 2.6. Such bugs are sometimes caused by old version of r2. If this is the case, do not use radare2 version from your distribution's repositories (i.e apt-get install radare2), hence the differences you see. Use the latest version from git or at least the last release. See installation instructions here. – Megabeets Jul 7 '18 at 14:38
  • Hello @Megabeets, turns out I have installed r2 2.7 version in Kali (missworking) and r2 2.4 version in Debian (properly working) IMG: ibb.co/dYL4mo – Razvi Jul 7 '18 at 16:09
  • I love when new version has regression not catched from dev team. – realtebo Jul 8 '18 at 10:58
  • @Razvi so it might be a bug. Please open an issue in the radare2 Github repository, describing the problem. – Megabeets Jul 8 '18 at 12:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.