Riccardo Mori

Results 24 issues of Riccardo Mori

**Describe the bug** Apparently LIEF is messing in some way with the standard implementation of `stringstream`, in particular regarding the `operator

bug
API

Consider the executable `ntoskrnl.exe`[1] (official version of ntoskrnl.exe) After exporting it with BinExport on IDA you will find that the function `FsRtlMdlReadCompleteDevEx` at address `0x14032E010` is erroneously identified as `IMPORTED`...

bug

I've tried compiling the module without success. This error appears when I launch ./load.sh ```bash rmmod: ERROR: Module afl_snapshot is not currently loaded env ARCH='x64' LINUX_SYSTEM_MAP='/proc/kallsyms' python3 lookup_symbols.py make -C...

There is a buffer overflow inside contrib/tools/pngfix.c ```c int main(int argc, const char **argv) { char temp_name[FILENAME_MAX+1]; ... size_t outlen = strlen(*argv); ... else if (suffix != NULL) memcpy(temp_name, *argv,...

Removing useless `eval` command when printing to stdout with `echo`. The `eval` command is out of place here.

**Version and Platform (required):** - Binary Ninja Version: 3.6.4741-dev - OS: Archlinux - OS Version: linux 6.6.5-arch1-1 - CPU Architecture: x64 **Bug Description:** Address pointing to the incorrect external symbol...

Type: Bug
File Format: ELF
Arch: x86
Effort: Medium
Impact: Medium
Component: Relocations

In the [Catalog1 conversion notebook](https://github.com/Cisco-Talos/binary_function_similarity/blob/main/Results/notebooks/Convert%20Catalog1%20results.ipynb) it is used the scikit-learn module. It should be added in the python requirements.txt file

enhancement

We should enforce on the python API the same deisgn choices over caching/uncaching that we used on python-binexport/qbindiff. The design choices can be summarized in the following points: - `Function`...

enhancement

In order to make the repository lighter it would be better to move the IDA SDKs out of the repository. The SDKs are encrypted and used only for tests in...

enhancement

As it is right now the whole architecture handling code that mostly resides in the `analysis` folder is rarely (if not never) being used in other parts of the python...

help wanted
question