You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
BinDiff, just shows whatever is different in the underlying BinExport files. It has no knowledge about the instruction types.
Implementing such a feature would mean that we need to make BinExport aware of the instruction types as well and mark them somehow.
And then it remains an open question of wether we still want to include the nop-style instructions in the BinDiff similarity score.
There are also use cases where I as an analyst would be legitimately interested in extra nop bytes. If a basic block changes in a way that includes multi-byte nops, then that might be an indicator that something was patched out, or that it should serve as a placeholder for other code/exploits to overwrite it.
look at the pics
many variants
The text was updated successfully, but these errors were encountered: