Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

False-positive decoding on AMD64: INTO #22

Closed
woodruffw opened this issue Nov 7, 2020 · 0 comments
Closed

False-positive decoding on AMD64: INTO #22

woodruffw opened this issue Nov 7, 2020 · 0 comments

Comments

@woodruffw
Copy link

Hi there, mishegos maintainer here.

It looks like bddisasm currently treats CEh as a valid decoding for INTO (i.e., interrupt level 4 if FLAGS.OF=1) in 64-bit mode. This is incorrect -- CEh is only INTO in 32-bit mode, and is invalid in 64-bit mode.

Some examples (the first two columns are XED and Zydis reporting that the decoding is invalid; the third is bddisasm incorrectly reporting a valid decoding):

ce (0 / 0) (0 / 0) INTO (1 / 4)

Similarly, prefixed versions should also be treated as invalid in 64-bit mode:

6667f365ce (0 / 0) (0 / 0) INTO (5 / 4)

From the AMD developer's manual:

Screen Shot 2020-11-07 at 4 16 27 PM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant