Release Notes
Version: 5.6.2 (from 5.6.0)
Commits: 63 (from 13 contributors)
Highlights
- Fixed 12 critical vulnerabilities (Thanks NowSecure, Google, Synopsys and HuntrDev! for reporting)
- Support new file fileformat used by Xamarin to pack .NET libraries (XALZ)
- ihex:// (intel hexadecimal object files) are working again (it was broken for a while)
- lz4 deflating is now supported at API and commandline levels
- FreeBSD is now part of the CI, improved stability and fixed all related warnings
- The new w+ (wx+) commands write and seek to the end of the written chunk
- Panels fixed a couple of glitches and improved usability with decompilers
Authors
Anderson Angel Diaz Anton Kochkov Bernhard M. Wiedemann Dennis Goodlett Florian M Nerijus Bendziunas PauRE Sergi Àlvarez i Capilla nemarci pancake pancake wargio
Changelog
api
- New
r_inflate_lz4API to reuse LZ4 across all libs - Support building with system-provided lz4 library
asm
- Support assembling the cmn, teq and tst arm32 instructions
- Fix oobread bugs in cr16 disassembler
- Fix pop [rsp] emulation for x86 ���������������
bin/io
- Add ELF reloc patching for R_386_32 and R_386_PC32
- Handle SH, MIPS and ARM in COFF binaries
- Initial support for XALZ binaries from Xamarin
- Fix ihex:// io parser as it was not working
ci
- Partial #19687: Add release github actions workflow
- Publish FreeBSD artifacts and purge the srcdir
cons
- Fix 'disable mouse' ansi code
- Minor rgb.parse optimization and remove the use of sscanf in pal.c
- Fix visibility issue in the bluy theme
crash
- Properly fix the UAF in r_io_bank_map_add_top
- Early break when parsing corrupted DEXs to avoid DoS
- Fix oobread in pxj
- Prefer memleak over usaf in io.bank's rbtree bug
- Fix DoS in MACHO parser spotted by clusterfuzz
- Improve boundary checks to fix oobread segfaults
- Fix DoS when loading a fuzzed DEX file
- Fix UAF in pyc parser
- Fix negative index in anal.arm64.cs
- Fix bins/*/rep8 - UAF crash in pyc parser
- Fix oobread segfault in java arith8.class
- Fix java oobread in id_000000,sig_06,sync_m1,src_000048
panels
- Fix panel focus glitch
- Fix overlapping titles on small frames
- Close menu when a different decompiler is selected
shell
- New 'w+' command, to write a string and seek at the end
- Fix parsing of 'ra?' and 'r0x' subcommands
- Add prgl command to decompress current block using lz4
- Fix Negative Offset in Hexdump Json Output