From 30d1e86f9b6cc1287a144cd11e926bac22be0a8a Mon Sep 17 00:00:00 2001 From: DARK_LBP Date: Tue, 21 Jan 2020 10:34:42 +0800 Subject: [PATCH] Check sys_sym_tbl address is in current_program before analyze. --- firmware_tools/ghidra/vxhunter_analysis.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/firmware_tools/ghidra/vxhunter_analysis.py b/firmware_tools/ghidra/vxhunter_analysis.py index 591d6a6..1f1b67c 100755 --- a/firmware_tools/ghidra/vxhunter_analysis.py +++ b/firmware_tools/ghidra/vxhunter_analysis.py @@ -228,6 +228,10 @@ def analyze_symbols(): print('{}\r\n'.format("-" * 60)) return + if not is_address_in_current_program(sys_sym_tbl.getAddress()): + print('{}\r\n'.format("-" * 60)) + return + sys_sym_addr = toAddr(getInt(sys_sym_tbl.getAddress())) if sys_sym_addr.getOffset() == 0: print('{}\r\n'.format("-" * 60))