-
Notifications
You must be signed in to change notification settings - Fork 113
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Indirect Call Instructions should read Rip #87
Comments
Ha, that is correct! Somehow, the |
Pushed a fix for this - it is available in the following commit: 3df189f Thanks again for reporting this! |
…lude read access, as the instruction pointer is saved on the stack.
Hi @vlutas Thanks a ton for the quick fix! Could you please fix these as well? |
…structions; added missing `SCS`, `rCX` and `rDX` operands for `SYSEXIT` instruction.
Hello! |
Hi @vlutas, sorry for keeping pinning in this thread. |
Hello! |
I tried decode instruction
ff d0
with theNdDecodeEx(&ix,...)
function and it gavecall rax
.However, the
ix.RipAccess
feild is set with only 0x2 andix.StackAccess
set to 0x2.Since the call instructions should store the call-site onto the stack, should
ix.RipAccess
be0x2 | 0x1
?ND_ACCESS_WRITE
is defined as 0x2 andND_ACCESS_READ
is 0x1.The text was updated successfully, but these errors were encountered: