smda 2.4.2__tar.gz → 2.4.4__tar.gz

{smda-2.4.2/smda.egg-info → smda-2.4.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: smda
-Version: 2.4.2
+Version: 2.4.4
 Summary: A recursive disassmbler optimized for CFG recovery from memory dumps. Based on capstone.
 Home-page: https://github.com/danielplohmann/smda
 Author: Daniel Plohmann
@@ -133,6 +133,8 @@ make test
 ```
 
 ## Version History
+ * 2025-12-15: v2.4.4 - Extended set of default prologues for additional 64bit GCC-style byte combinations. Added exit syscall check to improve function end recognition. (THX: @N0fix)
+ * 2025-12-10: v2.4.3 - Compatibility issue for IDA export, API changes happened already in 8.5, so adjusted the version check.
  * 2025-11-28: v2.4.2 - Fix for a bug when extracting and merging code areas from section tables. (THX: @r0ny123)
  * 2025-11-28: v2.4.1 - Modernized packaging by also building a wheel. (THX: @dimbleby)
  * 2025-11-21: v2.4.0 - Integration of DelphiReSym by @WenzWenzWenz for Delphi VMT parsing, thanks to @r0ny123 for adapting it!!

{smda-2.4.2 → smda-2.4.4}/README.md

@@ -101,6 +101,8 @@ make test
 ```
 
 ## Version History
+ * 2025-12-15: v2.4.4 - Extended set of default prologues for additional 64bit GCC-style byte combinations. Added exit syscall check to improve function end recognition. (THX: @N0fix)
+ * 2025-12-10: v2.4.3 - Compatibility issue for IDA export, API changes happened already in 8.5, so adjusted the version check.
  * 2025-11-28: v2.4.2 - Fix for a bug when extracting and merging code areas from section tables. (THX: @r0ny123)
  * 2025-11-28: v2.4.1 - Modernized packaging by also building a wheel. (THX: @dimbleby)
  * 2025-11-21: v2.4.0 - Integration of DelphiReSym by @WenzWenzWenz for Delphi VMT parsing, thanks to @r0ny123 for adapting it!!

{smda-2.4.2 → smda-2.4.4}/setup.py

@@ -12,7 +12,7 @@ requirements.append("lief>=0.16.0")
 setup(
     name="smda",
     # note to self: always change this in config as well.
-    version="2.4.2",
+    version="2.4.4",
     description="A recursive disassmbler optimized for CFG recovery from memory dumps. Based on capstone.",
     long_description_content_type="text/markdown",
     long_description=long_description,

{smda-2.4.2 → smda-2.4.4}/smda/SmdaConfig.py

@@ -4,7 +4,7 @@ import os
 
 class SmdaConfig:
     # note to self: always change this in setup.py as well!
-    VERSION = "2.4.2"
+    VERSION = "2.4.4"
     ESCAPER_DOWNWARD_COMPATIBILITY = "1.13.16"
     CONFIG_FILE_PATH = str(os.path.abspath(__file__))
     PROJECT_ROOT = str(os.path.abspath(os.sep.join([CONFIG_FILE_PATH, "..", ".."])))

{smda-2.4.2 → smda-2.4.4}/smda/common/labelprovider/ElfSymbolProvider.py

@@ -32,7 +32,6 @@ class ElfSymbolProvider(AbstractLabelProvider):
         if binary_info.file_path:
             with open(binary_info.file_path, "rb") as fin:
                 data = fin.read()
-            return
         elif binary_info.raw_data:
             data = binary_info.raw_data
         else:

{smda-2.4.2 → smda-2.4.4}/smda/ida/IdaInterface.py

@@ -32,10 +32,10 @@ class IdaInterface:
 
     def __init__(self):
         if not IdaInterface.instance:
-            if idaapi.IDA_SDK_VERSION >= 740 and idaapi.IDA_SDK_VERSION < 900:
+            if idaapi.IDA_SDK_VERSION >= 740 and idaapi.IDA_SDK_VERSION < 850:
                 IdaInterface.instance = Ida74Interface()
-            if idaapi.IDA_SDK_VERSION >= 900:
-                IdaInterface.instance = Ida90Interface()
+            if idaapi.IDA_SDK_VERSION >= 850:
+                IdaInterface.instance = Ida85Interface()
             else:
                 IdaInterface.instance = Ida73Interface()
 
@@ -48,7 +48,7 @@ class IdaInterface:
 
 class Ida74Interface(BackendInterface):
     def __init__(self):
-        self.version = "IDA Pro 7.4"
+        self.version = "IDA Pro 7.4 - 8.4"
         self._processor_map = {"metapc": "intel"}
         self._api_map = {}
         self._import_module_name = ""
@@ -277,9 +277,9 @@ class Ida73Interface(BackendInterface):
         return True
 
 
-class Ida90Interface(BackendInterface):
+class Ida85Interface(BackendInterface):
     def __init__(self):
-        self.version = "IDA Pro 9.0"
+        self.version = "IDA Pro 8.5+"
         self._processor_map = {"metapc": "intel"}
         self._api_map = {}
         self._import_module_name = ""

{smda-2.4.2 → smda-2.4.4}/smda/intel/IntelDisassembler.py

@@ -402,6 +402,21 @@ class IntelDisassembler:
                             "  analyzeFunction() found ending instruction @0x%08x",
                             i_address,
                         )
+                    elif i_mnemonic_noprefix in ["syscall"]:
+                        if previous_address and previous_mnemonic == "mov":
+                            prev_operands = previous_op_str.split(",")
+                            if len(prev_operands) == 2:
+                                reg = prev_operands[0].strip().lower()
+                                if (self.disassembly.binary_info.bitness == 64 and reg == "rax") or (
+                                    self.disassembly.binary_info.bitness == 32 and reg == "eax"
+                                ):
+                                    syscall_number_str = int(prev_operands[1].strip(), 16)
+                                    if syscall_number_str == 60:
+                                        self._analyzeEndInstruction(state)
+                                        LOGGER.debug(
+                                            "  analyzeFunction() found program ending instruction @0x%08x",
+                                            i_address,
+                                        )
                     elif previous_address and i_address != start_addr and previous_mnemonic == "call":
                         instruction_sequence = list(
                             self.capstone.disasm(self._getDisasmWindowBuffer(i_address), i_address)

{smda-2.4.2 → smda-2.4.4}/smda/intel/definitions.py

@@ -52,6 +52,7 @@ DEFAULT_PROLOGUES = [
     b"\x89\xff\x55\x8b\xec",
     b"\x55\x8b\xec",
     b"\x55\x89\xe5",
+    b"\x55\x48\x89\xe5",
 ]
 
 # these cover 99% of confirmed function starts in the reference data set

{smda-2.4.2 → smda-2.4.4/smda.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: smda
-Version: 2.4.2
+Version: 2.4.4
 Summary: A recursive disassmbler optimized for CFG recovery from memory dumps. Based on capstone.
 Home-page: https://github.com/danielplohmann/smda
 Author: Daniel Plohmann
@@ -133,6 +133,8 @@ make test
 ```
 
 ## Version History
+ * 2025-12-15: v2.4.4 - Extended set of default prologues for additional 64bit GCC-style byte combinations. Added exit syscall check to improve function end recognition. (THX: @N0fix)
+ * 2025-12-10: v2.4.3 - Compatibility issue for IDA export, API changes happened already in 8.5, so adjusted the version check.
  * 2025-11-28: v2.4.2 - Fix for a bug when extracting and merging code areas from section tables. (THX: @r0ny123)
  * 2025-11-28: v2.4.1 - Modernized packaging by also building a wheel. (THX: @dimbleby)
  * 2025-11-21: v2.4.0 - Integration of DelphiReSym by @WenzWenzWenz for Delphi VMT parsing, thanks to @r0ny123 for adapting it!!

{smda-2.4.2 → smda-2.4.4}/tests/testFileFormatParsers.py

@@ -124,7 +124,7 @@ class SmdaIntegrationTestSuite(unittest.TestCase):
         binary_info.oep = binary_info.getOep()
         disasm._disassemble(binary_info)
         komplex_unmapped_disassembly = disasm.disassembleUnmappedBuffer(komplex_binary)
-        self.assertEqual(komplex_unmapped_disassembly.num_functions, 208)
+        self.assertEqual(komplex_unmapped_disassembly.num_functions, 211)
 
 
 if __name__ == "__main__":