3 ms·
For me, the one spot where Ghidra is lacking is support for vtables (or COM objects). You can't simply feed it a C++ header file that defines the COM object.
by Dwedit 4y ago
For me, the one spot where Ghidra is lacking is support for vtables (or COM objects). You can't simply feed it a C++ header file that defines the COM object.
- amrb 4y agoSilly question but was a plugin like this not enough to fix the vtable? Else do we just need a feature added or is it more involved? https://github.com/astrelsky/Ghidra-Cpp-Class-Analyzer https://github.com/astrelsky/Ghidra-Cpp-Class-Analyzer
- mdaniel 4y agoIs there an issue requesting that behavior? My guess is it'll be some onoz trying to ship a C++ parser but "you don't ask, you don't get" and asking on HN is not what I meant :-D Actually, having written that out: is there vtable support and just not C++ header parsing support, or both facets are missing?
- amrb 4y agoReading the issues [0] there is a 'prototype' script "RecoverClassesFromRTTIScript.java" to rebuild vtable's, testing on a project it does indeed resolve further. https://github.com/NationalSecurityAgency/ghidra/issues/516 https://github.com/NationalSecurityAgency/ghidra/issues/516