deadeert / ews Goto Github PK

In some circumstances, exec function does not work properly.
The execution stops in middle of the function while the emulator state does not reach any error.

When using EWS on firmware with a lot of (sparse) segments, the emulator initialization is really slow.

This post is to engage a discussion on how being able to add memory state rewind capacity on the plugin.
Just pushing some idea in here...

• Storing the all segments' memory is way too costly, so the mechanism must only track memory modification(s)
  between each step of the emulation.

Describe the bug

• Some windows are not close when the plugin is reset.

To Reproduce

• Open a memory windows and hit reset shortcut.

Describe the bug

Bug occurs in emu/unicorn/generic.py in function do_mapping.

Line that causes the issue.

uc.mem_write(seg.start_ea,ida_bytes.get_bytes(seg.start_ea,seg.size()))

API get_bytes() is expecting a value less or equals to 4GB (0xffffffff).
Unicorn won't let map 4GB segment as well.

Correction: Split big segment in sub segments of size 1GB ?

Versions (please complete the following information):

• IDA 8.2

User configuration loading do not init properly the stub configuration.
Tag stubs are not setup when emulator is initialized.