logoalt Hacker News

deractoday at 2:17 AM1 replyview on HN

Btw, I recently did my first patches with ghidra. Is there any way to avoid jumping into a code cave by shifting all the instructions up then updating any statements referring to those memory locations? Seems like it should be simple enoigh in theory, but I didn't find an implementation on a cursory search. Could probably code up a plugin pretty easily.


Replies

BobbyTables2today at 3:42 AM

How can you be dead certain that all references are known in Ghidra?

Just non-disassembled function or unidentified struct would ruin your plans…