Commit Graph

23486 Commits

Author SHA1 Message Date
pancake
76f868166b Add proper help for the aom command 2022-02-27 20:03:04 +01:00
pancake
9779982241 Find strings on maddr'd binaries with izz ##bin
* Test with and without the -m
2022-02-27 19:56:31 +01:00
pancake
3a5e758a4c Remove duplicated logic related to lz4 and meson 2022-02-27 19:03:10 +01:00
Sergi Àlvarez i Capilla
7f472c50eb Fix two minor leaks spotted by coverity 2022-02-26 13:46:46 +01:00
pancake
c7f89529a7 Check bounds when skipping words in string scan 2022-02-26 01:00:35 +01:00
pancake
19bb45f78f Honor ArchInfo.opalign in pia ##disasm 2022-02-26 00:57:05 +01:00
pancake
7cb30eaf0d Fix #19610 - Honor minopsz in pia ##disasm 2022-02-26 00:57:05 +01:00
pancake
61c2a5b9ba Fix wide32 string detection that caused to miss other ascii strings ##bin
* Update tests with more good strings and less false positives
* Ticket: https://github.com/radareorg/radare2/issues/19727
* Reproducer: rev.exe
2022-02-25 23:06:23 +01:00
Sergi Àlvarez i Capilla
a9829f757f Let users change the blocksize from visual prompt 2022-02-25 16:49:30 +01:00
pancake
8959e053bc
Add some sign extend to some v850 st/sst insns ##esil 2022-02-25 16:17:37 +01:00
pancake
83f55161d1 Fix negative allocation in mdmpdos 2022-02-25 00:45:07 +01:00
pancake
79d108a4c2 Fix off by one read in psw 2022-02-24 12:46:29 +01:00
pancake
837d781879 Fix memory leak in RCore.cmdQueue 2022-02-24 11:57:28 +01:00
pancake
2178cd24a3 Restore and revert blocksize in V: ##visual 2022-02-24 11:30:33 +01:00
pancake
634b886e84 Fix DoS in PE/QNX/DYLDCACHE/PSX parsers ##crash
* Reported by lazymio
* Reproducer: AAA4AAAAAB4=
2022-02-24 04:53:06 +01:00
pancake
333e99190a Update list of file extensions considered scripts 2022-02-24 01:11:08 +01:00
pancake
3ee2ef36c8 Fix large loading times in macho parser ##bin
* Not really a DoS, but almost
* Reported by lazymio
* Reproducer:

zvrt/gCd7QBMYWT6AAD6/2NiQGsOAAGbuAAAADQAAID7AAAAAAEAAAEBZWUgcmR4LCByY3gBHQAAABEAAAAB/wAA7wABAAFiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiY2JiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJiYmJi/3///2KdYmJidmJiZc767QIA/38BAAr/7n/WAc767QAAAgD2AB0AABAFAAAVAQAAAAHv7+/v7+/v7+/v729jYWwvc2hhcmUvcmFkYXJlMi9wZGJ4QAAAAAQAAAEBYmVxPwCQHckEAAAAANBEyQR6ABQAkETJBAAAAAAhAAAAAAIAAAAQAAIAAAAQEAAAEgAAAAEAAABlYXhAKysBAA==
2022-02-23 23:46:30 +01:00
pancake
f986d0281b Fix DoS in kernelcache bin parser ##crash
* Reported by lazymio
* Reproducer z/rt/gwAAAEuAAB//wAAAACe2QEaAAAG+s8yAOH/AQAAAA==
2022-02-23 23:46:15 +01:00
aemmitt-ns
6500381f5e
Fix operands that have an extension plus a shift (#19746)
* check op.shiftType for sign extensions in addition to op.extend
2022-02-23 00:28:11 +01:00
archcloudlabs
3b774834dc Adding NULL check to prevent segfault 2022-02-21 23:54:38 +01:00
pancake
cfc1c5d202 Fix #19726 - fix meson definition order issue when using syslz4 ##build 2022-02-21 19:32:51 +01:00
pancake
a35f89f86e Fix oobread in macho core symbolication ##crash
* Reported by @cnitlrt via huntr.dev
2022-02-21 19:25:02 +01:00
pancake
515e592b9b Fix null deref in bin.symbols ##crash
* Reported by cnitlrt via huntr.dev
2022-02-21 18:47:11 +01:00
pancake
27fe803178 Fix DoS in the minidump parser ##crash
* Reported by lazymio via huntr.dev
* Reproducer: mdmp-dos
2022-02-21 18:32:36 +01:00
pancake
4fa23038b3
Fix #19729 - Make pswj consistent with psw output ##print 2022-02-21 15:00:04 +01:00
pancake
6691d80989 Fix #19739 - Fix oobread in pv* and fix bug in pvj ##print 2022-02-21 14:15:50 +01:00
pancake
1face81feb Fix #19737 - Handle ESC and space in the ascii hex column ##visual 2022-02-20 16:57:04 +01:00
Dennis Goodlett
b6b56e700a Handle jump tables in agfm ##anal 2022-02-20 14:10:26 +01:00
Dennis Goodlett
f36e518cde
Add agfma to get assembly in mermaid graphs ##anal 2022-02-20 09:59:42 +01:00
Dennis Goodlett
517cc28a31 Fix uninitialized switch shift variable 2022-02-20 09:57:43 +01:00
Sergi Àlvarez i Capilla
d24dbb9fbb Fix DoS on macho parser spotted by scan coverity ##crash 2022-02-18 21:13:55 +01:00
pkubaj
6e4819b054
Add support for powerpc, powerpc64, powerpc64le and riscv64 on FreeBSD ##debug
* Also correct issue in vmenus.c, where ch is checked later whether it's -1, but on ARM and POWER, char is unsigned.
2022-02-18 19:25:53 +01:00
Lazula
3de3c43ec6 Free color in r_cons_pal_init() 2022-02-18 14:23:30 +01:00
pancake
c84b723262 Fix heap buffer overflow in dyldcache parser ##crash
* Reported by: Lazymio via huntr.dev
* Reproducer: dyldovf
2022-02-18 12:45:44 +01:00
pancake
b550b267a3
Fix slow loading times for small ELF sample ##bin 2022-02-18 12:38:46 +01:00
Dennis Goodlett
eccee9beb7
Add agfm command to print cfg graphs using mermaid syntax ##analysis 2022-02-18 12:31:32 +01:00
aemmitt
f59b7dfb56 fix the arm64 sdiv and udiv instrs on div by 0 2022-02-18 08:11:49 +01:00
pancake
33ce7e78a2 Add initial support for katakana ##charset
* Support multibyte charsets
2022-02-16 10:58:45 +01:00
Sergi Àlvarez i Capilla
99a3887e6a Add rasm2 and rax2 wasi/wapm packages ##build
* wapm install pancake/r2
  $ wapm run r2 -
* wapm install pancake/rax2
  $ wapm run rax2 1+1
* wapm install pancake/rasm2
  $ wapm run rasm2 -a x86 -b 32 -d 90
2022-02-16 10:58:03 +01:00
Sergi Àlvarez i Capilla
4a11460c9d Build fixes for wasi/wapm/wasm and update sdb ##build 2022-02-16 10:58:03 +01:00
Sergi Àlvarez i Capilla
90d4b07757 Fix sorting of cr16 conditional bits 2022-02-15 13:31:51 +01:00
pancake
3345147916
Properly fix the UAF in r_io_bank_map_add_top ##crash
* Associated with the CVE-2022-0559
* Reported by alkyne Choi via huntr.dev
2022-02-15 12:46:20 +01:00
pancake
a88843e989
Early break when parsing corrupted DEXs to avoid DoS ##crash
* Reported by Google clusterfuzz
* Reproducer: clusterfuzz-testcase-minimized-ia_fuzz-5227091270959104
2022-02-15 12:35:34 +01:00
Sergi Àlvarez i Capilla
46a69a5014 Fix all the latest covs which spotted new findings 2022-02-15 12:05:50 +01:00
Sergi Àlvarez i Capilla
e13fb7d183 Support building with system-provided lz4 library ##build 2022-02-15 11:43:50 +01:00
Sergi Àlvarez i Capilla
91740c46d2 Fix oobread in pxj ##crash
* Reproducer: db/cmd/cmd_print
* Proper refactoring and cleanup+testing on the works
2022-02-15 11:13:07 +01:00
Angel Diaz
aa849b682b Fix io/r_ptrace types definitions for FreeBSD (radareorg#19687) 2022-02-14 16:53:33 +01:00
Sergi Àlvarez i Capilla
ea6e426e76 Fix redefined macro warning in plan9 plugin 2022-02-14 16:39:36 +01:00
Florian M
5a7ffe4c0a Add ELF reloc patching for R_386_32 and R_386_PC32 ##bin 2022-02-14 03:16:49 +01:00
Anton Kochkov
62d6d226ff Fix cmn, teq and tst in arm32 assembler ##asm 2022-02-14 02:00:05 +01:00