I'ld like to see which functions are operating with certain object's fields that I already processed, meaning I created the structure and assigned it to the correct places in the functions in IDA, without having to run a dynamic debugger. (for example, I would like to see a list of the functions accessing/writing/reading the Foo data field of the Bar object), but as far as I know it's not implemented in IDA.
Add a comment
|
2 Answers
IDA has been able to show cross-references to structure members since version 6.2:
answered Jan 7, 2014 at 14:04
-
You need to have HexRays decompiler plugin for this, right? Commented Jan 9, 2014 at 23:16
-
1
Unfortunately this IDA feature doesn't always work as needed especially if you define your objects in Hex-Rays.
If your problem is around using Hex-Rays, you can use the XRefs plugin with the hexrays-python API in IDA 6.4.
As far as I understand latest version of IDAPython with support of IDA 6.5 at google code already contains these bindings in IDA API module, but it is not fully operational yet (at least I'm not succeeded to make it work).
