New answers tagged ida
0
It turns out that IDA pro fails to render dwarf5 format which seems to be default in gcc-11.
More info on that: https://www.phoronix.com/scan.php?page=news_item&px=GCC-11-DWARF-5-Possible-Default
I changed the format to dwarf4 and it renders the data correctly.
g++ -gdwarf-4 example.cpp -o example.exe
0
Could it be an indirect call to the function? Like described here
One of the suggestions is to search for cross-references to that data area you found. For example off_.... looks suspicious.
0
idacode offers a wonderful integration between VSCode and idapython.
The github repo is the best place to find the IDA plugin, and there is a VSCode extension under the same name available in the extension repository.
If your IDA installation is not in the default location, see the readme in the github repo.
Once installed, you enable a local listening ...
0
Hope this will help other people face with this problem in the future.
The answer is: make all related-variables volatile. See the image bellow:
Either code_compress_magic or Signature must be set as a volatile type. This will make Hexrays decompiler happy.
2
Position cursor where you want to insert (cannot be at structure end) and
Press Ctrl+E (see expand command in IDA documentation)
-1
Fixed with the combined solution from this and this posts.
2
It would appear that the result of the FftCorr1 function is returned in register S0.
How parameters and results are passed is specified in the ARM 64-bit Procedure Call Standard.
A short Godbolt example shows how a simple function float example(float) returns its result in S0.
0
According to devttys0's answer.
This script is for IDA version higher than 7.4.
def convert_data():
align_size = ida_kernwin.ask_long(4, "align size")
if align_size == None:
return
start = idc.read_selection_start()
end = idc.read_selection_end()
print("Align %d bytes from 0x%X - 0x%X" ...
Top 50 recent answers are included