kathmi / zynamics Goto Github PK

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?
Windows/windows

Please provide any additional information below.

Would like a dics or refund.

Hello,
I found that "Import Symbols and Comments" does only that.

I would like the Function Flags and Type to be imported also.

Maybe when analyzing Windows executables its not relevant, but I'm working with 
ARM firmwares and therefore the used compiler/library is often not known and 
available. Not using IDA's fancy library features forces me to set these 
informations manually.

It would be a great assistance to have as much information copied as possible.

Thanks
Stefan

What steps will reproduce the problem?
1. Install bindiff 4.1 
2. Start IDA
3. Check in Output window

What is the expected output? 
I'm expecting to see nothing during the start.

What do you see instead?
LoadLibrary(C:\Program Files\IDA 6.5\plugins\zynamics_bindiff_4_1.plw) error: 
The specified procedure could not be found.
C:\Program Files\IDA 6.5\plugins\zynamics_bindiff_4_1.plw: can't load file

LoadLibrary(C:\Program Files\IDA 6.5\plugins\zynamics_binexport_8.plw) error: 
The specified procedure could not be found.
C:\Program Files\IDA 6.5\plugins\zynamics_binexport_8.plw: can't load file

LoadLibrary(C:\Program Files\IDA 6.5\plugins\zynamics_bindiff_4_1.plw) error: 
The specified procedure could not be found.
C:\Program Files\IDA 6.5\plugins\zynamics_bindiff_4_1.plw: can't load file

LoadLibrary(C:\Program Files\IDA 6.5\plugins\zynamics_binexport_8.plw) error: 
The specified procedure could not be found.
C:\Program Files\IDA 6.5\plugins\zynamics_binexport_8.plw: can't load file

What version of the product are you using? On what operating system?
IDA 6.5.131217 on Windows XP SP3, BinDiff 4.1, Java 8, 25

Please provide any additional information below.

Hi! I paid 400 $ for bin navy tr. ID 0.G.868691083325297 and what? When shall I 
get it?

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1.When I set a breakpoint in IE8, debugclient.exe printing Error message and 
the status of a breakpoint is invalid：
2.Record function cannot be used.


What is the expected output? What do you see instead?
Error:Couldn't read byte from address 74EC5D18
Error:Couldn't store original data

I feel it is relocated address  error occurred

What version of the product are you using? On what operating system?
binnavi 6.0.0
os:win7
software:IE8

Please provide any additional information below.

What steps will reproduce the problem?
1. Disasemble a big modern dll (using c++11) from IDA 6.5 with the symbols for 
this dll in the same folder so I get an IDB with all the function names and 
others.
2. From Edit/Plugins/BinExport 6
3. Run DifferDeluxe binary export command from IDA 
4. If I export it from Binnavi I get the same error in a message box (invalid 
operand size in getSizePrefix) but without the other output.

What is the expected output? What do you see instead?
I expect that it's exported, but instead I get the following output:
03:24:24 big.dll: starting export
03:24:25 Unable to determine name for member with id: 4278255748
03:24:25 Unable to determine name for member with id: 4278263416
03:24:25 Unable to determine name for member with id: 4278305558
03:24:25 Unable to determine name for member with id: 4278314473
03:24:25 flow analysis
03:26:16 Error exporting: invalid operand size in getSizePrefix


What version of the product are you using? On what operating system?
I'm using Binnavi 5.0.0 with IDA 6.5 in Windows 7.

Please provide any additional information below.

What steps will reproduce the problem?
1. Install Java 8.
2. Try to run the bindiff401-win-x86.msi installer.
3. It says: zynamics BinDiff 4.0.1 requiresa working Java Runtime Environment 
(JRE). Install JRE 1.6 or higher first.

This is a fresh install in a new Windows 7 x64 machine. I installed it in the 
past in other machines without any problems.

I'm storing the Bindiff workspace on a shared drive. Normally working on 
Windows I installed it on Linux and tried to work with the existing workspace.
I soon discovered that this is not working, since Bindiff uses the native 
Slashes for its relative paths.
Could you find a unified solution so that a workspace can be shared between 
OS's (maybe using java.io.File path capabilities)?

Thanks
Stefan

What steps will reproduce the problem?
1. Open BinDiff Java application
2. Click on "Help/Report a Bug" menu entry
3. Browser opens and complains about non existing address

What is the expected output? What do you see instead?
Expected: code.google.com/p/zynamics/issues/entry
Got: bugs.zynamics.com/BinDiff

What version of the product are you using?
Bindiff 4.0.1 (Build 15694)

What steps will reproduce the problem?
1.Breakpoint does not automatically become active, you need to disable actions, 
and then enable it.
2.Click Start trace mode button to start recording, when the program is run no 
tracks were recorded,Then click Stop trace mode button eject" The following 
breakpoints could not be removed from the target process".


What is the expected output? What do you see instead?
" The following breakpoints could not be removed from the target process".

What version of the product are you using? On what operating system?
binnavi 5.0.0 16367,vmware_8.0-XP,win7

Please provide any additional information below.

What steps will reproduce the problem?
1. Start IDA and open first database
2. Run BinDiff plugin selecting second database
3. Right click on line in "Matched Functions" display and select "View 
Flowgraphs"

What is the expected output? What do you see instead?
Expected: Flowgraph display should open
Instead: Error window with title "Java Virtual Machine Launcher" saying "Error: 
Could not create the Java Virtual Machine"

What version of the product are you using? On what operating system?
BinDiff 4.0.1 Build 15694
Win 7 Prof x64 SP1
IDA 6.3.120802
Java RE 7.0.50

Please provide any additional information below.
Flow Graph display works when using BinDiff standalone app.
Tested with IDA 32 and 64.

What steps will reproduce the problem?
1.Install Backtrack 5 linux on Mac OS X using virtualbox
2.Install PostgresDB on the Backtrack VM
3.Install BinNavi 5
4.Connect to the PostgresDB
5.Initialise the DB

What is the expected output? What do you see instead?
Expect project to be created. BinNavi could not initialize the tables required 
for storing disassembly data in the database.

What version of the product are you using? On what operating system?
Mac OS X 10.8.2 on Backtrack 5 VM using VirtualBox

Please provide any additional information below.
Can connect to database successfully but cannot initialise project. 
E00016: Database could not be initialized

What steps will reproduce the problem?
1. Call getReilCode in a block containing the instruction:
      from the gui: movsd qword ss:[void * esp], oword xmm0
      from the api: movsd qword ss:[esp+var_BC], oword xmm0
      instruction bytes: F2 0F 11 04 24
2. Got an exception

What is the expected output? What do you see instead?
Expect the reil translation, but I got an Exception instead.

What version of the product are you using? On what operating system?
Binnavi 6.0. The OS is Windows 7.

Please provide any additional information below.
Exception details:
com.google.security.zynamics.binnavi.API.reil.InternalTranslationException was 
unhandled
Message: An unhandled exception of type:
'com.google.security.zynamics.binnavi.API.reil.InternalTranslationException' 
occurred in BinNavi.exe

Additional information: 
com.google.security.zynamics.reil.translators.InternalTranslationException: 
Error: Argument instruction is not a movsd instruction (invalid number of 
operands)

--
$ printf "\xf2\x0f\x11\x04\x24" | ndisasm -b32 -
00000000  F20F110424        movsd [esp],xmm0

when i want use clientgdb to debug gdb server i see this error: 

c:\> clientgdb.exe 127.0.0.1:2001 Cisco2600 -vv -test
Restarting the GDB server
Entering GdbCpu::waitForGreetMessage
Error: Couldn't read from GDB server (Code 4)
Couldn't receive Greet message from the GDB server (Code 4)
Error: Couldn't start the GDB server

my dynamips is ok! because i can connect with ida pro gdb !!!

What version of the product are you using? On what operating system?
4.0.4 in windows 7

Please provide any additional information below.
in another scnario when i use serial port (COM1,9600) to connect real cisco 
router i see this error: 
error: couldn`t get COM port configuration (code 87)

What steps will reproduce the problem?
1.Diff 2 .idb

What is the expected output? What do you see instead?

Difference between 2 binary
Error : function BinExport2Diff8 undefined

What version of the product are you using? On what operating system?

Bindiff 4.1
IDA Pro 6.4
Windows 7 32bits
Java 8 build 1.8.0_31-b13

Please provide any additional information below.

Reporter: [email protected]

I am using Bindiff 4.0 with IDA Pro 6.3 on Windows XPsp3 with Java JRE
6 update 35.

Diffing several databases works but when I try to use the viewgraph
option, it fails.
The Zynamics bindiff banner appears followed by a message box
"Couldn't load configuration". It freezes for
a while before giving back hand.

I've checked into the %APPDATA%\bindiff
I have two files : bindiffdeluxe.xml with seems to be fine and a
bindiffgui_4_0.xml file which is empty.

I've read throught the manual a few times to be sure I installed
BinDiff properly and could not find anything on Internet
related to such error.

If it can help, I am currently working on fontsub.dll 5.1.2600.5512
and 5.1.2600.5853

What steps will reproduce the problem?
1. Open a script (python) window in a function disassembly window/view
2. Use `cg` or `cf` to access the View2d or the other Graphs of the current 
function
3. How to get the calling functions of the current function?

What is the expected output? What do you see instead?
I see that there is a 'calling functions' tab that displays them, but couldn't 
find an api chain for getting them from the scripting/plugin system.

What version of the product are you using? On what operating system?
Binnavi 6.0.0 (I think it's still beta). On Windows 7.

The objc_helper.py didn't find any refs to the correct functions. Unknown 
reason: IDA versioning difference or compiler optimalization??

diff --git a/objc_helper.py b/objc_helper.py
index 6f0ea78..5027c27 100644
--- a/objc_helper.py
+++ b/objc_helper.py
@@ -77,6 +77,12 @@ def trace_param(ea, min_ea, op_type, op_val):
                         # Optimizations use LR as general reg
                         op_val = 14
                     else:
+                       refs = list(idautils.DataRefsFrom(ea))
+                       if refs:
+                               while len(refs) > 0:
+                                       far_ref = refs[0]
+                                       refs = 
list(idautils.DataRefsFrom(refs[0]))
+                               return far_ref
                         try:
                             op_val = int(displ_re.search(idc.GetDisasm(ea)).group('regnum'))
                         except:

What steps will reproduce the problem?
1. Open diff from workspace
2. Select "Show in callgraph" from context menu of matched functions
3. Select "Export View as Image" from View menu

What is the expected output? What do you see instead?
I expect three images but get none. Regardless of any dialog settings.

What version of the product are you using? On what operating system?
BinDiff 4.0.1 with 2 patches.
Java 7 update 13 (32- and 64-bit)
Windows 7 Prof. x64

What steps will reproduce the problem?
1. Execute client32.exe remote debugger on a Windows XP system

What is the expected output? What do you see instead?
I expect the remote debugger to function properly.  However, I see the error 
message 'Error: Breakpoint handler failed' multiple times.  I also occasionally 
see 'Error: Malformed packet passed to function (Command cmd_setbps)'


What version of the product are you using? On what operating system?
4.0.6


Please provide any additional information below.

What steps will reproduce the problem?
1. Start BinDiff
2. Create new workspace (default or not)
3. Add new diff
4. Close workspace
5. Open Workspace again (whichever method)

or

4. Close BinDiff
5. Restart BinDiff

What is the expected output? What do you see instead?
Expected: Contents of workspace to be shown in left pane of Workspace Tab
Got: Empty left pane

What version of the product are you using?
BinDiff 4.0.1 Build 15694

Please provide any additional information below.
The data is still part of the workspace.
When trying to add the same existing diff it says "diff is already part of the 
active workspace".
Adding a new diff results in all contents temporarily shown - until closing and 
reopening of the workspace.

Ever since IDA 6.6 shipped we are unable to modify the start/end address in the 
Import Symbols and Comments dialog. BinDiff will not allow us to write any text 
in the first 4 fields. This makes importing the data a pretty big nuisance.

Is this a known issue or how do I go with providing more data, assuming you can 
not reproduce it?

What steps will reproduce the problem?
1. Install zynamics_binexport_6.pmc and zynamics_binexport_6.pmc64 into 
/Applications/IDA Pro 6.5/IDA binaries/plugins
2. Configure the IDA location as /Applications/IDA Pro 6.5/IDA binaries/ (which 
is the only directory that the settings window will allow).
3. Select "Import IDB Database…"

What is the expected output? What do you see instead?
I'd expect to see the import window.

What version of the product are you using? On what operating system?
BinNavi 5.0.0 on OS X 10.7.5.

Please provide any additional information below.
Is there any way to use the exporter from within IDA instead?  If so, what 
format should I choose?  And then how do I import that in BinNavi?

What steps will reproduce the problem?
1.  Diff 2 binaries
2.  Save the Workspace.  Close BinDiff.
3.  Reopen BinDiff and load the previously saved Workspace

What is the expected output? What do you see instead?
I would expect to pick up where I left off.  Instead the left hand column is 
blank.

What version of the product are you using? On what operating system?
BinDiff v4.01 on Windows 7

Please provide any additional information below.

1. What is the latest version of the binnavi ? I am currently using version 5.0 
 16367.I want to upgrade to the latest version.

2.Is Binnavi planning to support dynamic Taint Analysis and symbolic execution?

What steps will reproduce the problem?
1. Install BinDiff 4.1
2. Run idaq64.exe
3.

What is the expected output? What do you see instead?
IDA produces the error "Fatal error before kernel init" on load 
(zynamics_binexport_8.p64 seems to be the culprit)

What version of the product are you using? On what operating system?
BinDiff 4.1 with IDA Pro 6.6 (also tried 6.5). Windows 7 and 8.1.

Please provide any additional information below.

What steps will reproduce the problem?
1.Loading a file into IDA Pro 
2.Diffing the database with a separate file and comparing using BinDiff plug-in
3.Left with matched functions window (which I want to export to a text/html 
file).


What is the expected output? What do you see instead?

I am able to successfully diff the database, I want the matched function 
results window to be output to a text file. However, I can only produce a 
.BinDiff and .BinExport. P

What version of the product are you using? On what operating system?
BinDiff 4.0 on Linux Ubuntu 12.10 with IDA Pro (full-version) 6.5

Please provide any additional information below.
I am not looking to copy\paste, I am looking for a manner in which I can get 
all the information from the matched functions window to a text file. I am not 
looking for a .BinDiff file either. 

What steps will reproduce the problem?
1. CTRL-6 Diff any set of IDBs (more noticeable on large ones).
2. After Diff is done, do a CTRL-6 again and click “Import Symbols and 
Comments..” feature.
3. Sit and wait, wait some more, until it's done.

What is the expected output? What do you see instead?
Port feature to complete in reasonable time.
A deadlocked IDA with thread starved UI, Maybe a smoking overheated HD.

What version of the product are you using? On what operating system?
4.0.x, any supported OS.

Please provide any additional information below.
An API either by design or mistake kernel32->FlushFileBuffers() causes
excessive disk writes and thus kills performance.

Also the temp file it apparently repeatedly writes too is very small.
Instead of an fstream concept, I suggest it be replaced with a memstream one.
See: http://www.sirmabus.macromonkey.com/speed-zynamics-bindiff-3000percent/

Hi, 

I was charged tax on my most recent order however the purchase is tax exempt. I 
have the appropriate documentation. Who can I contact about this?

Thanks,

Tim

What steps will reproduce the problem?
1. Using a custom processor plug-in, load a binary for that architecture. IDA 
disassembles the file properly and produces accurate graphs.
2. Run a BinDiff comparison of the two files
3. View the matching and statistics window. BinDiff has reduced most of the 
functions the 1-2 basic blocks and 3-4 instructions. This is FAR fewer than are 
actually present or shown in the IDA graphs

What is the expected output? What do you see instead?
I would expect the function statistics to match those displayed in the IDA 
graphs. 

What version of the product are you using? On what operating system?
Win7, IDA 6.3, BinDiff 401

Please provide any additional information below.

BinDiff 4.0.1 Build15464 working well with IDA Pro 6.4 on Windows 7 64-bit

We have just upgraded to the latest IDA Pro 6.5 on Windows 7 64-bit.

It appears BinDiff is not compatible with the new IDA Pro database

Launching the diff with IDAPro6.5 database, about 12 seconds, there is a dialog 
displaying: "An Error occured while diffing. Exit Code 1"...

Is there a newer version of BinDiff.
Thanks
Kiem

What steps will reproduce the problem?
1. Try to diff 2 files

What is the expected output? What do you see instead?
I'm seeing a Warning window with the following message:
[path_to_workspace]\export.idc Runtime error on 
[path_to_workspace]\export.idc:5 Attempt to call undefined function 
'BinExport2Diff8'

What version of the product are you using? On what operating system?
IDA 6.5.131217, Windows XP SP3, BinDiff 4.1

Please provide any additional information below.

What steps will reproduce the problem?
Windows XP SP 2
1. Install MySQL 5.5
2. The idb file attached
3. Binnavi 3.0.0 
4. IDAPython 1.1.92
5. Open BinNavi and import the attached .idb file into default MySQL DB

What is the expected output? What do you see instead?
I expect the call graph etc to be shown but i see:

The IDB file 'D:\Documents and Settings\YongHui\My Documents\notepad.idb' could 
not be imported. Please check the stack trace for more information.

Possible causes:
  - Database connection problems.
  - Bug in the IDB exporter.

Stack Trace:
BinNavi.E.B.A(Unknown Source)
BinNavi.E.B.B(Unknown Source)
BinNavi.E.B$1.A(Unknown Source)
com.zynamics.zylib.P.B$_A.run(Unknown Source)


Problem impact:
  - The IDB file was imported partially. A raw module in an incosistent state was created. This raw module should be deleted.


What version of the product are you using? On what operating system?
IDA Pro 5.5, BinNavi 3.0.0 WinXP SP2 MYSQL 5.5 Community MSI installer 
IDAPython 1.1.92

Please provide any additional information below.
Licence has expired. But not sure if its cause of probkem

Didn‘t BinNavi  support memory and hardware breakpoints？

What steps will reproduce the problem?
1.The error happened even when I restart IDA
2. The error come when I reopen a saved diff then want to show the flowgraph.

What is the expected output? What do you see instead?
I see a "Warning"


What version of the product are you using? On what operating system?
Latest version of the product, latest version of IDA x32 on Windows 7 x64

Please provide any additional information below.
Which information do you need to help on this issue ?

What steps will reproduce the problem?
1. Import existing, or create new diff (tested with win executable and ARM 
firmware) in Bindiff standalone workspace.
2. Open "Matched Functions" View.
3. Select "Show in Call Graph" from context menu for any line in table.

What is the expected output? What do you see instead?
Expected: A Call graph, generated without error message.
Instead: Error message "Couldn't calculate graph layout" two times, and a 
crippled graph.

What version of the product are you using? On what operating system?
Win 7 Prof. SP 1 x64
Java 7 update 5
Bindiff 4.0.2 (patched version with issue #6 fixed)

What steps will reproduce the problem?
1. Unzip binnavi500-any.zip
2. Launch BinNavi via "java -Xms128m -Xmx1024m -jar bin/binnavi.jar"

What is the expected output? What do you see instead?
Upon launch, it tells me this is the first time running BinNavi.  Clicking past 
that window, I get a message to configure IDA's location.  Upon clicking past 
that window, BinNavi hangs.

What version of the product are you using? On what operating system?
Mac OS X 10.7.5

Please provide any additional information below.
I was able to get around this initial hang by creating an empty 
~/.zynamics/BinNavi/config.xml file.  That caused an initial error, but 
prevented the subsequent hang.

Once there was a valid config file, there wasn't a hang on launch.  (But 
there's another hang that will be separately reported.)

Note that the manual indicates that there's a Mac OS X installer, which there 
doesn't appear to be.

What steps will reproduce the problem?
1. checkout bochs-python (git clone 
https://code.google.com/p/zynamics.bochs-python/)


What is the expected output? What do you see instead?
expected = copy of bochs-python

instead = appears to be the contents of the bincrowd project (bincrowd.py, etc)

What version of the product are you using? On what operating system?


Please provide any additional information below.

What steps will reproduce the problem?
1. Import a large amount of functions after running a diff

What is the expected output? What do you see instead?
The import completes w/out error messages or warnings.

What version of the product are you using? On what operating system?
Downloaded today, not sure of version.  OS X 10.8.1

Please provide any additional information below.
Basically error messages constantly appear while importing (about the function 
already having being renamed, or about an invalid character (like a : for OS X 
functions)).  Being able to click ignore all warnings of this kind would be 
very helpful (I got it for some, but never for the renamed one).

Thanks!

What steps will reproduce the problem?
1. Placing an online order for BinDiff using Google Wallet as payment method
2.
3.

What is the expected output? What do you see instead?
download link in email.

What version of the product are you using? On what operating system?
purchased BinDiff

Please provide any additional information below.
Hey Guys, I checked all the plausible locations (junk/spam etc) for 
correspondence; no follow-up email received.

I'd like a refund.

Cheers,

-Paul

Add to the decompilation section the command provided by a commenter to 
http://blog.zynamics.com/2010/04/30/importing-msdn-documentation-into-ida-pro/

What steps will reproduce the problem?
1. Install BinDiff 4.1
2. Run idaq64.exe

What is the expected output? What do you see instead?
error "Fatal error before kernel init" on load of IDA (same error as 
https://code.google.com/p/zynamics/issues/detail?id=30&can=1&colspec=ID%20Produc
t%20Type%20Status%20Priority%20Milestone%20Owner%20Summary)

What version of the product are you using? On what operating system?
IDA 6.6 x64 -- bindiff410-win-x86.msi

Please provide any additional information below.
Could you resend me the download link to my payer email (Transaction Id will be 
given if needed).