binaryninja-api icon indicating copy to clipboard operation
binaryninja-api copied to clipboard

Floating point type propagation failure

Open plafosse opened this issue 1 year ago • 0 comments

MLIL fails to properly propagate a floating point type to the constant under some conditions.

In the included binary you can see that on instruction 0x0000298f the constant isn't being represented as a floating point value and the zmm0 variable doesn't have the type of double

image

It should be trivially determinable via the following instruction indicating its part of a floating point add image

fp_bug.zip

Special Thanks to: Zao Yang and Stefan Nagy for their research in Decompiler Fuzzing for reporting this issue.

plafosse avatar Apr 22 '24 19:04 plafosse