ghidra - ghidra - Software reverse engineering (SRE) suite of tools
Ghidra is a software reverse engineering (SRE) framework developed
by NSA's Research Directorate for NSA's cybersecurity mission. It
helps analyze malicious code and malware like viruses, and can give
cybersecurity professionals a better understanding of potential
vulnerabilities in their networks and systems.
by Lawrence Rogers (2019-04-03):
* Release 9.0.2-1
Analysis. Constant reference analysis boundary controls for speculative references has been fixed. Speculative references are references created from computed constants passed as parameters, stored to a location, or from indexed offsets from a register. (Issue #228)
Decompiler. Fixed rendering bug in the Decompiler when the "Find" dialog is closed. (Issue #282)
Decompiler. Fixed decompiler handling of Function Definition data types. (Issue #247)
Decompiler. Fixed "Free Varnode" exception in RuleConditionalMove. (Issue #294)
Diff. Fixed exceptions that can occur in the Diff View for programs with overlays.
Documentation. Corrected the spelling of "listener" throughout the source code. (Issue #235)
Exporter. Exporting a selection as Intel Hex will now allow a selection of any length. Previously this was restricted to multiples of 16 bytes. (Issue #260)
GUI. Fixed exception that occurs after disabling MyProgramChangesDisplayPlugin.
GUI. Updated the "Open Program" dialog to disallow file drop operations. (Issue #252)
Languages. The ARM Thumb CMP.W and LSL isntructions have been changed to correctly decode. There are still issues to work out with Unpredictable execution when Rd is the PC. (Issue #280)
Multi-User:Ghidra Server. Corrected bug introduced into ghidraSvr.bat which could prevent Ghidra Server startup (Issue #279)
Scripting. MultiInstructionMemReference script has been corrected to consider input and output registers when placing a reference on an instruction.
Basic Infrastructure. Added a property to support/launch.properties to prevent log4j from using jansi.dll on Windows. (Issue #286)