Skip to content

v0.4.0

Choose a tag to compare

@github-actions github-actions released this 27 Apr 09:13
· 87 commits to master since this release
chore: bump workspace to 0.4.0

49 commits since v0.3.0. New public modules:
  rsleigh_decompile::iot_capabilities
  rsleigh_decompile::iot_family
  rsleigh_decompile::xor_strings

New CLI flag: --xor-strings.

Notable fixes since v0.3.0:
  - MIPS function discovery honors ELF endianness (mipsel: 36→2550
    on a stripped 633K Mirai-class sample)
  - jmp_rax trampoline scan arch-gated to x86 / x86-64 (no more
    bogus JMP RBP/RDI banners on MIPS/ARM/RISC-V samples)
  - printer: identity stack_alias after emitted Store (struct_accum
    duplicate-load fix; deref-count 3→2)
  - printer: alias-aware self-ref in cross-line DCE
  - decompile: cross-block IAT-via-register call resolution
  - decompile: N-way nested ternary for 3+ way Phi merges
  - decompile: loop-body and branch-diamond recovery

134 lib tests, 18 CLI test suites. Bench 73.6 avg / 238 leaks.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>