News for hackers. Stuff that matters.
Re:Capstone Disassembler Framework by saagarjha on Wednesday September 25, 2024 @10:47PM (#41654036)
lol, no. For one Capstone has a lot of bugs (it uses some old version of LLVM as its base) but the whole question of how to decode things is complicated because there are a lot of pitfalls and inconsistencies that different disassemblers handle differently. And what the hardware does is a different question entirely: it may not match the spec, or even other processors with the same ISA.
Re:Capstone Disassembler Framework by xvilka on Wednesday September 25, 2024 @10:57PM (#41654092)
It just updated to the nearly latest LLVM, so that argument is void: https://github.com/capstone-engine/capstone/blob/next/docs/c...
Re:Capstone Disassembler Framework by saagarjha on Thursday September 26, 2024 @12:04AM (#41654431)
I'll believe it when I see it. If I can go a few years without wasting time during a CTF because of an incorrect decode I'll change my tune.
Re:Capstone Disassembler Framework by woodruffw on Thursday September 26, 2024 @12:16AM (#41654501)
This has been my experience as well. I’ve had to rip Capstone out of more research projects than I care to admit.