Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

r2cami hangs when downloading PDBs #22

Open
logankonopatzke opened this issue Aug 31, 2020 · 2 comments
Open

r2cami hangs when downloading PDBs #22

logankonopatzke opened this issue Aug 31, 2020 · 2 comments

Comments

@logankonopatzke
Copy link
Contributor

Using the command python3 r2cami.py -k ntoskrnl.exe -n ntdll.dll -o windows_support.yaml I'm attempting to automatically generate the support files for CAMI. The process hangs when downloading the necessary PDB files.

The following is shown in console:
Attempting to download compressed pdb in /home/testuser/.local/share/radare2/pdb/ntkrnlmp.pdb/512C583E636270A8A26A461F4B383A091/ntkrnlmp.pd_ Falling back to uncompressed pdb Attempting to download uncompressed pdb in /home/testuser/.local/share/radare2/pdb/ntkrnlmp.pdb/512C583E636270A8A26A461F4B383A091/ntkrnlmp.pdb

@emuresan
Copy link
Contributor

That's a bug I've encountered myself, but unfortunately it's not on our end.
This same scenario can sometimes be reproduced by downloading the pdb using the radare shell (idpd) or the radare command line utilities (rabin2 -PP ...).
Sadly, I don't know of any fix in the lastest master, but usually it works after a couple of tries.
If that still doesn't work, you can compute the url from where radare attempts to download the pdb using the GUID and the debug file name that's provided in those error logs and download it manualy from the same location from where radare does. You should also place it in the same location where radare attempts to since r2cami will check for an existing pdb there before attempting to download one.
curl -L https://msdl.microsoft.com/download/symbols/ntkrnlmp.pdb/512C583E636270A8A26A461F4B383A091/ntkrnlmp.pdb -o /home/testuser/.local/share/radare2/pdb/ntkrnlmp.pdb/512C583E636270A8A26A461F4B383A091/ntkrnlmp.pdb

@logankonopatzke
Copy link
Contributor Author

Ah thank you for clarifying. Manually downloading it seems to work. Should we leave this issue open for future reference? (I'll try to submit a fix to radare if I find the root of the problem)

@ianichitei ianichitei pinned this issue Sep 4, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants