edb-debugger icon indicating copy to clipboard operation
edb-debugger copied to clipboard

Replace header_size with Header Regions system

Open AaronOpfer opened this issue 9 years ago • 1 comments

edb currently allows the architecture targets to specify that the PE/ELF headers have a certain number of bytes dedicated to their headers from their base address. This is the header_size call. This gives the GUI the ability to color the header area gray and also can give hints to the analysis engine.

However, the current system is a little naive. PE and ELF both support putting headers in arbitrary order at arbitrary positions. There can be gaps between what parts are considered headers (headers can even overlap!).

I propose that this be replaced with another mechanism that allows giving some sort of list of regions so that the header declaration can be considered more robust. Each region should have a start address, size, and probably a label or name that the GUI can show as a tooltip when mousing over the region.


Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

AaronOpfer avatar Nov 29 '16 15:11 AaronOpfer

The core functionality is in there. Now we just need to make use of it in things like the QDisassemblyView

eteran avatar Dec 20 '16 06:12 eteran