IDA Pro

IDA Pro 5.0 (March 2006)

Major features

Introduction of a graph based used interface. The text interface remains instantly available.

Processor Specific Enhancements

ARM: improved distinction of code and data: conditional instructions do not start a new
function.

•ARM: IDA knows that a function call destroys R0.
•ARM: IDA knows that only GNU AS reverts halves of double data items; for other
assemblers the double number format conforms the standard (IEEE).
•ARM: IDA tries to find out the base register of the stack variables by looking for 'mov rN,
SP' instructions.
•ARM: MOV R12, SP is recognized as the beginning of a code sequence.
•ARM: new target assembler: ARM/Thumb Macro Assembler.
•ARM: slightly better jump table recognition.
•JAVA: complete rewrite of the Java module to support the new JDK 1.5 (or Java5.0)
•PC: added support for the newly documented 'cmpxchg16b' instruction.
•PC: improved function analysis.
•PC: better test of instruction sanity.
•PC: ins instruction was always displayed in the long form.
•PC: more careful approach to jump table xref construction.
•PC: previously undocumented form of the 'test' instruction is recognized (group 3modrm /1)
•PC: newer versions of SEH_ prolog/epilog functions are recognized
•6812: the HCS12 config file has been updated
•78k0: has been replaced by a rewritten module
•78k0s: has been replaced by a rewritten module

File Formats

•ELF: added support for SPARC unaligned relocation types.
•ELF: relocations in .gnu.conflict section are ignored since this section is not loaded by
default.
•COFF: MC68K: support for R_PCR24 relocation type has been added (used in PalmOS).
•DBG: ida does not create functions for data names.
•more PalmPilot system trap codes are added.
•if the input file is corrupted, IDA displays an error message without exiting to the OS.

Kernel Enhancements

•DDK2003 type library files have been updated; wnet/windows.h types have been added.
•Flow charts of processors with delayed jump slots are generated correctly (this feature
requires support from the processor module).
•a regular function is created instead of a function tail if it makes sense.
analysis: the rule which creates functions because of a dref has been improved.
•better use of fixup information during the final pass of the analysis.
•FLAIR: CodeWarrior library files for 6812 are supported (since the file format is
undocumented, there might be problems).
•IDA does not automatically assign a type to local names because it rarely makes sense
•recognition of function pointer tables has been improved.
•turning off the solid border lines turns off SUBROUTINE lines too.
•a full path is accepted in ida.cfg:GRAPH_VISUALIZER.
•minor improvement of switch table construction (if a jump table crossed through segment
boundaries, IDA would fail to create it)
•signature files have been updated or added: Borland Developer Studio 6, Microsoft
Visual C runtime version 8 (.net) 32-bit and 64-bit libraries, Microsoft MFC 64-bit,
Microsoft Active Template Library 64-bit.
•the MD5 of the input file is saved in the database.

Application Details:

Maintainers: About Maintainership