Giters

CheckPointSW / Karta

Karta - source code assisted fast binary matching plugin for IDA

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Store and share information between matched libraries

chkp-eyalit opened this issue · comments

commented

The matcher today attempts to match every library independently of the other libraries that should be / were already matched. This means that we lose useful information that can improve our matching logic:

  1. Libpng usually locates zlib (external) functions, zlib could use it during its matching (or vice versa)
  2. Known library borders from previous matchings could create an informative upper / lower bound on our file map

TODO: Should think if could somehow merge the solution for this issue with the solution for manually defining anchors.