Questions tagged [type-reconstruction]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
185 views

How can I tell ghidra what structure an address register points to?

I am reversing a raw bare-metal binary firmware for a tricore processor (TC1762/TC1766). In many functions i'm currently reversing there is access to offsets of the address stored in the a0 register. ...
user103675's user avatar
2 votes
1 answer
109 views

How to define a 28-bit integer in Ghidra

I'm working on reverse-engineering firmware for an STM32G0B1, which has two onboard CAN modules, in Ghidra. I think that a proper data structure for both the Tx and Rx FIFO buffers would help me ...
Vincent Guttmann's user avatar
0 votes
1 answer
126 views

determine proprietary 16-bit floating-point format

Background / Introducion CAN message Mercedes-Benz, cannot determine 16-bit data type for temperature. 7E 00 32 01 37 00 According to @rnd-ash (who has reverse engineered ACTIA Basic XS Monitor ...
alecxs's user avatar
  • 113
2 votes
1 answer
135 views

What is the difference between uintX_n (used in IDA Pro) and unitX_t types?

During debugging a binary in IDA Pro, I've noticed types of the form 30 uint16_n 00000002 struct {uint16_t inner;} 42 uint32_n ...
Newbie's user avatar
  • 277
1 vote
1 answer
60 views

How are members of a Structure Type positioned on the stack?

Some of the structure types have members that are not stacked next to each other. Check out the structure type at 0x33E6 in bzip2_base (x86-64) here. There's an int at location offset 0, a char at 4 ...
Sav's user avatar
  • 15
0 votes
1 answer
52 views

structures defined on stack?

While reading this paper on type recovery from executables, I came across following paragraph: It is worth noting that the domain of parameters of a function can be considered as a structure ...
R4444's user avatar
  • 1,797
1 vote
1 answer
124 views

is there any way to get type information using IDA Demo

I am using IDA Demo (evaluation version >7). I have a binary: #include <stdbool.h> int do_decode(){} int main() { bool decode = false; char opt = getopt(); switch (opt) { case 'd': ...
R4444's user avatar
  • 1,797
1 vote
2 answers
198 views

Type reconstruction ambiguity

In TIE: Principled Reverse Engineering of Types in Binary Programs, Lee J. et al claim to solve most of the challenges in the process of C code decompilation that come with type reconstruction. While ...
Antonio Frighetto's user avatar