mirror/ghidra
1
0
Fork 0
mirror of https://github.com/NationalSecurityAgency/ghidra.git synced 2026-09-25 17:00:36 -09:00
Code Issues Packages Projects Releases Wiki Activity

GP-6434 improve finding rust signature in Elf binaries

Browse Source 
check the .comment section first before searching for byte signature.
This commit is contained in:
dev747368
2026-03-10 21:18:39 +00:00
parent 7794b998c8
commit 1c59d2e56d
18 changed files with 79 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Ghidra/Features/Base/ghidra_scripts/EmuX86DeobfuscateExampleScript.java
View File

@@ -71,7 +71,7 @@ public class EmuX86DeobfuscateExampleScript extends GhidraScript {
if (currentProgram == null || !currentProgram.getName().startsWith(PROGRAM_NAME) ||
!"x86:LE:64:default".equals(currentProgram.getLanguageID().toString()) ||
!ElfLoader.ELF_NAME.equals(format)) {
!ElfLoader.isElf(format)) {
printerr("""
This emulation example script is specifically intended to be executed against