Skip to content

__chkstk screws up stack pointer analysis #5781

Description

@xusheng6
Screenshot 2024-07-20 at 12 52 56 PM

In the screenshot, we see that rsp becomes a variable due to the __chkstk call:

BEDaisy.sys.zip

If we patch and remove the code the stack variables are correctly analyzed:

Screenshot 2024-07-20 at 12 54 22 PM

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Component: CoreIssue needs changes to the coreEffort: MediumIssues require < 1 month of workImpact: LowIssue is a papercut or has a good, supported workaround

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions