Umar Farook (ir2re)

icon indicating a website link http://foolsofsecurity.com/ icon indicating an email [email protected]

icon company Fools Of Security Community icon location Bangalore icon location Security Researcher (Product Security, Binary Analysis, VR & Exploit Dev)

Results 2 issues of Umar Farook (ir2re)

[Filedelete] Filename is empty

2 comment

can anyone point me why filename is empty ? **Function:** https://github.com/tklengyel/drakvuf/blob/a6a6f302afbcb7535b7d9adaf0348a588152f43a/src/plugins/filedelete/filedelete.cpp#L192 **Filename** https://github.com/tklengyel/drakvuf/blob/a6a6f302afbcb7535b7d9adaf0348a588152f43a/src/plugins/filedelete/filedelete.cpp#L208 **Reference:** https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/content/wdm/ns-wdm-_file_object ![fileextractor_filename](https://user-images.githubusercontent.com/22318677/66844304-bd7ba380-ef8b-11e9-8d54-35a1b6148de3.png)

question

[Emulator] Not able to create SysnoMap for Multi Arch using Syscalls::arch::Sysno

1 comment

Sample Code ``` let mut map = SysnoMap:: i32>::new(); let sys_no = syscalls::x86::Sysno::from(0x10); map.insert(sys_no, || 1); ``` Error: ```expected enum `syscalls::Sysno`, found enum `syscalls::x86::Sysno```