From 34d970a6ea61cc82ba1f4feab365b64b4ed3dee0 Mon Sep 17 00:00:00 2001 From: James Chambers Date: Sat, 5 Nov 2022 18:12:17 -0400 Subject: [PATCH] Note the hack used for normalize style analysis broke in 10.2 --- README.md | 2 +- ghidra_scripts/GoDynamicStringsHigh.java | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index de01621..e0ff5b7 100644 --- a/README.md +++ b/README.md @@ -61,7 +61,7 @@ These can be found in the Golang category in the Script Manager. * `GoDynamicStringsSingle.java` * Performs the same analysis as `GoDynamicStrings.java`, but uses a single decompiler process. Use this if analyzing a large binary causes the parallel decompiler processes to exhaust system memory. * `GoDynamicStringsHigh.java` - * Experimental, uses P-Code output from the higher level "normalize" style analysis. Currently depends on a hack that turns off deadcode elimination in the decompiler (see ). + * Experimental, uses P-Code output from the higher level "normalize" style analysis. Currently depends on a hack that turns off deadcode elimination in the decompiler (see ). *This hack breaks in Ghidra 10.2.* * `GoKnownStrings.java` * Searches for standard unique strings and defines them. String data is loaded from `data/known_strings.json`. * `GoStringFiller.java` diff --git a/ghidra_scripts/GoDynamicStringsHigh.java b/ghidra_scripts/GoDynamicStringsHigh.java index 6d8b5db..fd0025e 100644 --- a/ghidra_scripts/GoDynamicStringsHigh.java +++ b/ghidra_scripts/GoDynamicStringsHigh.java @@ -23,6 +23,8 @@ //This version uses a hack combined with the "normalize" simplification //style to preserve nicer COPY operations in the PCode output, //which clearly indicate a constant value being copied to the stack. +// +//NOTE: The hack this script depends on breaks in Ghidra 10.2. //@author James Chambers //@category Golang //@keybinding