problems on IDA Pro Version 6.95.160808 (64-bit) about golang_loader_assist

[disconnect3d]

@futex
Put this after the imports:

ida_segment = idaapi
ida_funcs = idaapi
ida_xref = idaapi
ida_search = idaapi
ida_s = idaapi

Or pull the code from PR https://github.com/strazzere/golang_loader_assist/pull/4/files as this actually renames all of above into idaapi and so fixes your problem.

[strazzere]

Interesting - thank you for the comment and the PR. I will definitely add this to my list of things to relook at. I've actually be refactoring this code a bit so that it will work better with 32bit code, PE and MachO files. Thanks

[strazzere]

It would appear it failing to find the "hook" that I used to identify runtime_morestack (specifically I'm looking for word ptr ds:1003h, 0. This is causing the get_func to return a NoneType which results in this stack trace. I'll add code to make this be caught and prevent the following code to be reachable.

However, this means it won't actually complete in trying to map out all the functions. Can you provide the binary which you are running this on or at least a hash? I'd like to dig into this further and see if a different type of hook needs to be used.

Thanks for reporting this!

[vyrus001]

I can provide the binary for you soon, I don't want to post it tho because it is designed as a template for services in a CTF I am working on, shall i email it to you?

[strazzere]

Email works -- strazz at gmail - and that should give me more to test on for the fix.

[strazzere]

That would be excellent, strazz at gmail would be best :)

On Oct 21, 2016 4:45 PM, "vyrus001" [email protected] wrote:

I can provide the binary for you soon, I don't want to post it tho because
it is designed as a template for services in a CTF I am working on, shall i
email it to you?

—
You are receiving this because you were assigned.
Reply to this email directly, view it on GitHub
#1 (comment),
or mute the thread
https://github.com/notifications/unsubscribe-auth/AAmERuEsj6PC_8haqNqbFFHwH3d_EBCdks5q2U6YgaJpZM4Kco-u
.

[strazzere]

I haven't received any binaries yet - I'll try hunting down a handful of different one ITW though.

Could you clarify if the binaries you're trying to use the loader on are ELF or another format?

[vyrus001]

my last email should have contained several binaries for several different OSs, just posting here to verify / check that they were received.

[futex]

Hello,

I have a error too on ida 6.9.160222 (64bits), the message is quite different, but maybe the cause is the same.

Screenshoot of the error is here:

[strazzere]

If you repull from master - this should all be handled. Thanks!