5

I manage my structures in C files, the header might look like this:

#pragma pack(0)

typedef struct
{
    short important_value;
    char  _A[2]; // unknown
    int   interesting_value;
} STRUCT;

I loaded this into IDA via Ctrl+F9. Now I find out more about the structure, seeing that _A contains short imaginary_value.

When I try to reload this in IDA via Ctrl+F9, nothing happens. When I delete the structure in IDA, parse the C file and re-create the structure, I see the new structure, however all instances of STRUCT in the database are deleted.

So the question is, how do I reload the structure without removing all instances from the database.

6

Go to the Local Types (View->Open Subviews->Local Types or Shift + F1) window and then edit it from there by right clicking and clicking on edit on your structure's entry on the list.

| improve this answer | |
  • 2
    Is there a way to completely remove the types there. Not just #deleted? – heinrich5991 Jun 3 '13 at 19:46
  • @heinrich5991 Did you find a way to remove the #deleted entries? – crush Apr 3 '14 at 19:00
  • @crush Unfortunately I didn't, I also stopped reloading the structures at all because it broke some stuff, like forgetting that variables are of a certain type. – heinrich5991 Apr 4 '14 at 15:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.