Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Simple heuristic for identifying purecall #188

Open
sei-eschwartz opened this issue Jun 2, 2021 · 0 comments
Open

Simple heuristic for identifying purecall #188

sei-eschwartz opened this issue Jun 2, 2021 · 0 comments
Assignees

Comments

@sei-eschwartz
Copy link
Collaborator

From https://github.com/NationalSecurityAgency/ghidra/blob/master/Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/RTTIWindowsClassRecoverer.java#L1377

// use vftables with references to all the same function (except possibly one deleting
// destructor)to find the purecall function
identifyPureVirtualFunction(recoveredClasses);

@sei-ccohen have discussed a few mechanisms for identifying purecall in the past, but I think we somehow missed this pretty obvious idea.

It's a bit unclear if we would implement this in Prolog or C++.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants