Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Decompiler reports a low-level error after loading Ghidra project from 11.0 to 11.3.1 #7854

Open
swine-flu opened this issue Feb 24, 2025 · 1 comment

Comments

@swine-flu
Copy link

swine-flu commented Feb 24, 2025

Describe the bug
Decompiler fails to process a certain function after loading Ghidra project from 11.0 version to 11.3.1 version and reports the following error: $${\color{purple}\text{Low-level Error: Unlinked join address}}$$.
Obviously I've had no issues with this function while I was using 11.0 version. There are no problems with it in 11.3.1 version as well if I create a new project, import the same executable, analyze it and feed that function to the decompiler.

To Reproduce
Steps to reproduce the behavior:

  1. Load program.xml from the attachments
  2. Try to decompile the function from it
  3. See an exception being thrown

Expected behavior
Decompiler should be able to process this function without any issues.

Attachments
program.zip

Environment (please complete the following information):

  • OS: Windows 10
  • Java Version: 21.0.5
  • Ghidra Version: 11.3.1
  • Ghidra Origin: locally built

Additional context
Despite this function being quite hefty, as far as I can tell the issue is caused by a single Varnode which refers to a far call at the following address:

1000:1615 9a 00 00 d5 16        CALLF      FUN_16d5_0000                                            void FUN_16d5_0000(void)

Replacing this call with NOPs in Ghidra or skipping that node in Heritage::processJoins while using debugger allows the decompiler to finish its job but it's barely a solution. I tried a few other things like recreating the function but with no success.

@swine-flu swine-flu changed the title Decompiler reports a low-level error after loading Ghidra project from 11.3 to 11.4 Decompiler reports a low-level error after loading Ghidra project from 11.0 to 11.3.1 Feb 25, 2025
@swine-flu
Copy link
Author

Just noticed that the version for a local build doesn't seem right, so I picked the nearest ones accordingly to a date of their release considering that both of my versions were built locally.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant