diff --git a/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html b/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html index 678df44d79..0ed26c875b 100644 --- a/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html +++ b/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.html @@ -7,13 +7,14 @@
-@@ -32,11 +33,12 @@New Features
- Debugger. Introduced the Debugger, along with GDB and dbgeng.dll connectors for debugging user-mode applications on Linux and Windows, respectively. The UI includes threads, timeline, modules, memory, registers, watches, etc., for examining and controlling debug targets. See Help -> Contents -> What's New for more details. (GP-986)
-- Exporter. Added new exporters that write programs imported with the PE and ELF loaders back to their original file layout. Any file-backed bytes that were modified by the user in the program database will be reflected in the written file (except on relocations). Writing back a modified Memory Map is not supported. (GP-786, Issue #1501, #1505, #19)
+- Exporter. For programs imported with the PE and ELF loaders, new exporters are available that write back to the original file layout. Any file-backed bytes that were modified by the user in the program database will be reflected in the written file (except on relocations). Writing back a modified Memory Map is not supported. (GP-786, Issue #1501, #1505, #19)
- Graphing. Added Graph -> Data actions to the Code Browser, allowing visualization of specified pointer relationships in a graph. (GP-194)
- Scripting. Added prototype RecoverClassesFromRTTIScript and that uses RTTI information to enhance Ghidra's knowledge of class hierarchy, class member function types (constructors, destructors, deleting destructors, clones) and class member data. The script will label and put member functions into correct class namespace and apply new class structures created either using PDB information, if available, or Decompiler pcode information. (GP-339)
+- Scripting. Added an example script, LocateMemoryAddressForFileOffset, to demonstrate mapping of a location in the original imported file to the program memory address. Useful for cases where the original file offset is known; for example, a YARA rule match. (GP-782)
- Scripting. Created a script to allow users to search for image base offsets to the current cursor location in 32-bit and 64-bit programs. (GP-863)
gradle -I gradle/support/fetchDependencies.gradle init now downloads the Function ID datasets from the ghidra-data GitHub repository so they will be automatically included in development mode and custom builds. (GP-678, Issue #1007)gradle clean no longer deletes downloaded dependencies. The top-level flatRepo directory has been replaced with the dependencies directory. (GP-811, Issue #1663).note.gnu.build-id and .gnu_debuglink sections. (GP-468).pdata section of PE files that include exception handling data. (GP-729)WREG register aliases for PIC24 processor variants. (GP-901, Issue #2956)PPAGE register not being properly restored after CALL instructions in the HCS12 processor. (GP-920, Issue #1099)IDX1 addressing with negative immediate values. (GP-937, Issue #3008)diff --git a/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.html b/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.html index 3a6c25d342..232fc20470 100644 --- a/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.html +++ b/Ghidra/Configurations/Public_Release/src/global/docs/WhatsNew.html @@ -6,8 +6,9 @@Bugs
@@ -102,17 +110,20 @@Assembler. Fixed assemble Patch Instruction action to work on listings other than the primary static listing. (GP-623) Assembler. Modified assembler Patch Instruction action to ignore external symbols which produced bad offsets for instructions. (GP-645) Basic Infrastructure. Fixed an issue with Ghidra and its supporting launch scripts not being able to run correctly on Windows when an ampersand was in the path. Also fixed an issue with svrAdmin.bat and buildGhidraJar.bat not working if the Ghidra path contained a space. (GP-693, Issue #1726, #1728) +Basic Infrastructure. Corrected "LaunchSupport expected 2 to 4 arguments but got 1" error when starting Ghidra on Windows. (GP-1050, Issue #2176, #3122) Build. Building of pdb.exe on Windows now works if the path to the Ghidra repository contains a space. (GP-916, Issue #2998) Build. Corrected GPL DMG module build to properly utilize the jar dependencies included within the repository and distribution. (GP-934) +Build. Corrected an issue with +gradle prepDevwhen the Ghidra repository is on a different drive than the user's home directory on Windows OS. (GP-970, Issue #3047, #3062)Build. Fixed a bug that prevented Ghidra from launching in Single Jar Mode when its path contained a space. (GP-1039) C Parsing. The C-Parser bitfield parsing has been relaxed to allow declared bitfield sizes to exceed the base datatype size. The effective bitfield size may be clamped based upon the current data organization while preserving the declared size. (GP-558) -Data Types. Fixed a NullPointerException that occurred when trying to edit a function data type in a data type archive when there was no open program in the tool. (GP-356, Issue #2407) +Data Types. Fixed a NullPointerException that occurred when trying to edit a function datatype in a datatype archive when there was no open program in the tool. (GP-356, Issue #2407) Data Types. Corrected the retention of datatype archive search paths, which did not properly remember disabled paths. (GP-639) Data Types. Fixed potential deadlock encountered when working with the DataTypes tree. (GP-774, Issue #2832) Decompiler. Fixed endianess issue for joined, two-register returns of longlongvalues for MIPS 32-bit little endian variants. (GP-513)Decompiler. The Decompiler no longer emits comments in the middle of conditional expressions. (GP-621, Issue #1670) -Decompiler. Fixed +Redefinition of structure ...exceptions in the Decompiler caused by a PNG Image and other opaque datatypes. (GP-820, Issue #2734)Decompiler. Fixed Redefinition of structure...exceptions in the Decompiler caused by a PNG Image and other opaque datatypes. (GP-820, Issue #2734)Decompiler. Fixed infinite loop in the Decompiler when analyzing return values. (GP-821, Issue #2851) -Decompiler. Fixed bug in the Decompiler's handling of enumerated data types causing +Shared type idexceptions. (GP-895, Issue #2909)Decompiler. Fixed bug in the Decompiler's handling of enumerated datatypes causing Shared type idexceptions. (GP-895, Issue #2909)DWARF. Fixed and consolidated DEX and DWARF implementations of LEB128. (GP-444, Issue #2512) DWARF. Fixed unnecessary ELF header parsing when DWARF analyzer checks if it needs to run. Improved DWARF analyzer's run-once logic. (GP-695) DWARF. Fixed issue with DWARF data type importing that could omit the definition of a structure. (GP-929) @@ -132,13 +143,19 @@GUI. Fixed Function Graph bug that caused some vertex text to get clipped when using wide address format width. (GP-755, Issue #1008) GUI. Fixed bug in the Listing scroll bar that caused some screen reader software to deadlock. (GP-772, Issue #2820) GUI. Fixed bug that caused the UI to freeze when clicking in the Program Tree UI. The bug manifested depending upon the contents of the system clipboard. (GP-775) +GUI. Updated tooltip code to limit data types name length and updated formatting to place pertinent information at the top of the tooltip. (GP-836, Issue #2029) +GUI. Fixed exception triggered when the Bookmarks table failed to remove a deleted symbol. (GP-989, Issue #3066) +GUI. Fixed exception encountered when double-clicking a structure in an archive in the +closed for editstate. (GP-998)GUI. Fixed Function Graph stack trace encountered when changing the graph's background color option after showing and then closing the graph. (GP-1013, Issue #3058) Importer:ELF. Added support for additional PIC30 ELF relocations (4, 5, 6) and improved register symbol resolution and markup. (GP-710, Issue #2792) Importer:ELF. Changed processing of ELF absolute symbols (section ID 0xfff1) to treat them as constants by defining equates instead of memory symbols. (GP-902) Importer:ELF. Corrected EXTERNAL symbol alignment for PIC24, PIC30, PIC33 during ELF import. The improperly aligned symbol addresses would cause incorrect external symbol references to appear on instructions (e.g., RCALL). (GP-906)Importer:PE. Fixed error when importing a PE file with an uninitialized .textbsssection. (GP-397, Issue #2496)Importer:PE. Fixed a bug processing RUNTIME_INFO structures that caused a failure to load PE files under certain conditions when the list is empty. (GP-924, Issue #2995) +Importer:PE. Fixed an issue in the PeLoader that prevented PE files with 0 data directories from being imported. (GP-997, Issue #2858) Installation. Renamed database db.Recordclass todb.DBRecordto avoid naming conflict withjava.lang.Recordclass and potential import issues. (GP-193)Jython. Fixed pasting multi-line strings into the Python interpreter panel. (GP-487, Issue #2456) +Listing. A default thunk function now reflects the namespace of the thunked function similar to the way it reflects its name. This change also allows thunk functions of a this_callto have the correctthispointer parameter. Symbol table queries based upon name and/or namespace will always exclude default thunk functions. (GP-17)Listing. Fixed #US table processing to correctly interpret the string as UTF-16LE for CIL binaries. (GP-318) Listing. Fixed a sporadic listing operand hover stacktrace bug. (GP-987) PDB. Escaped more character strings in MSDIA pdb.exe XML output. (GP-578, Issue #1690) @@ -147,7 +164,7 @@Processors. Fixed issue with ARM VMRSinstruction parsing in thumb. (GP-735, Issue #2750)Processors. Corrected issue with M68000 floating point dynamic k-factor instruction semantics. (GP-736, Issue #2754) Processors. Fixed instruction semantics for x86 -MOVUPSinstruction. (GP-744, Issue #2789)Processors. Simplified SuperH +div1instruction. (GP-753, Issue #2864)Processors. Simplified SuperH div1instruction. Corrected several SuperH instructions to set flags properly around the delay slot. (GP-753, Issue #2863, #2864)Processors. Corrected issue with ARM co-processor registers and the MCRinstruction. (GP-761, Issue #2451)Processors. Fixed issued with x86 INSx.repandOUTSx.reppcode ordering. (GP-766, Issue #2829)Processors. Corrected addresses for PIC24 @@ -155,7 +172,13 @@TBLPAGandPSVPAGregisters. (GP-798, Issue #2844, #2855)Processors. Updated 8085 processor definition to disassemble XRA HLinstruction. (GP-818, Issue #2447)Processors. Corrected missing optional rex.wprefix for x86 conditional jump instructions. (GP-837, Issue #1163)Processors. Added +CALLW,ASRF,LSLF, andLSRFinstructions to PIC16 language. (GP-841, Issue #1362)Processors. Fixed ARM Thumb instructions which update the status flags to now correctly append an sto the instruction mnemonic. (GP-881)Processors. Made corrections to +wrinstruction for SPARC which in some cases did not write to the appropriate ASR register. (GP-928)Processors. Corrected issue with x86-64 +CALLandRETinstructions with0x67prefix pushing/popping the wrong address size from the stack. (GP-954, Issue #2976)Processors. Fixed issue with delay slots modifying some instructions in SuperH processor. (GP-969, Issue #2863) +Processors. Corrected pcode for x86-64 +RDMSRinstruction. (GP-982, Issue #3046)Processors. Corrected size of 20-bit signed immediate value in PPC VLE +e_liinstruction. (GP-1060)Scripting. Fixed scripting bug where showing a TableChooserDialog while having AnalysisMode.DISABLEDin use caused the dialog to be closed. (GP-1018, Issue #3103)Sleigh. Fixed multiple errors in x64 vector operation semantics. (GP-799)