Version and Platform (required):
- Binary Ninja Version: 5.3.9434
- Edition: free
- OS: windows
- OS Version: 11
- CPU Architecture: x64
Bug Description:
When searching for patterns, many tools(https://github.com/rikodot/binja_native_sigscan ,https://github.com/S1ckZer/Sig-Scanner---Binary-Ninja , https://github.com/A200K/IDA-Pro-SigMaker , https://github.com/mahmoudimus/ida-sigmaker) generate them with single question marks representing double bytes.
"E8 ? ? ? ?"
Inputting this pattern into the find function it is detected as a regex
using "E8 ?? ?? ?? ??" is detected correctly as flexhex.
Expected Behavior:
Signatures work regardless of the single/double question mark.
Additional Information:
Evaluating transferring off of IDA and I have a plethora of signatures I maintain.
It is nice that BN supports partial searches E8 ? ? ? ? B?
Version and Platform (required):
Bug Description:
When searching for patterns, many tools(https://github.com/rikodot/binja_native_sigscan ,https://github.com/S1ckZer/Sig-Scanner---Binary-Ninja , https://github.com/A200K/IDA-Pro-SigMaker , https://github.com/mahmoudimus/ida-sigmaker) generate them with single question marks representing double bytes.
"E8 ? ? ? ?"
Inputting this pattern into the find function it is detected as a regex
using "E8 ?? ?? ?? ??" is detected correctly as flexhex.
Expected Behavior:
Signatures work regardless of the single/double question mark.
Additional Information:
Evaluating transferring off of IDA and I have a plethora of signatures I maintain.
It is nice that BN supports partial searches E8 ? ? ? ? B?