3

I'm new to ghidra. I download the easy_reverse from crackme.one and open the executable file in ghidra.

When I'm trying to edit the main function signature I get an error: Can't parse name: argv[]. I searched for this error but found nothing on Google/GitHub and I run out of ideas what to do next to solve it. I would appreciate any help!

Here is a screenshot (I use mac): enter image description here

Improve this question

1 Answer 1

Reset to default
3

I continued to mess with it some more and found a way. I correct the signature to have a pointer of argv:

int main(int argc, char **argv)

But I don't really know why the pointer works and the standard C signature didn't. Hope for someone to clarify this.

Improve this answer
1
  • 1
    char **argv and char *argv[] are the same thing, just as a different notation. The answers in stackoverflow.com/questions/14298957/… explain this fairly well. Seems like Ghidra simply supports only of those, but will properly decompile accesses to argv as e.g. argv[0] even if the type is char **
    – Florian Magin
    Commented Apr 8, 2020 at 15:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.