From 0c38fd7345967588294b6b5c3f824f1d3dfb7f67 Mon Sep 17 00:00:00 2001 From: Horst Schirmeier Date: Sat, 23 May 2020 22:20:01 +0200 Subject: [PATCH] capstone: disassemble .text also for STT_NOTYPE Symbol type FUNC (STT_FUNC, "code object") seems not to suffice when parts of the disassembled binary come from assembler source files. We try to disassemble STT_NOTYPE (symbol type "unspecified") as well now. Change-Id: I582190900e66d6af0779dfaf3b569f0e157e9ce7 --- src/core/util/capstonedisassembler/CapstoneDisassembler.cpp | 1 + 1 file changed, 1 insertion(+) diff --git a/src/core/util/capstonedisassembler/CapstoneDisassembler.cpp b/src/core/util/capstonedisassembler/CapstoneDisassembler.cpp index 5302c81b..5f490efa 100644 --- a/src/core/util/capstonedisassembler/CapstoneDisassembler.cpp +++ b/src/core/util/capstonedisassembler/CapstoneDisassembler.cpp @@ -34,6 +34,7 @@ std::map CapstoneDisassembler::get_symtab_map(uint64_t sect_ for (ElfReader::container_t::const_iterator it = m_elf->sym_begin(); it != m_elf->sym_end(); ++it) { if (it->getSymbolType() != 2 /*SST_FUNC*/) { + if (it->getSymbolType() != STT_FUNC && it->getSymbolType() != STT_NOTYPE) { continue; }