Binary Ninja 4.1.5902 + macOS

Major Features
- Decompiler Improvements
- Graph Transform Control Flow Recovery
- Lifting Improvements
- Linux ARM Builds
- UEFI Enhancements
- Binary Ninja Base Address Scan Engine (BASE)
- History Widget
- Address Display / Stack View
- macOS/iOS/ObjectiveC Improvements
- Default Type Library
- Debugger Annotations and Memory Map API
- Time-Travel Debugging (TTD) Made Easy
- Architecture / Platform Changes
- Octeon Support
- TriCore (Paid Add-On)

UI Updates
Feature: Automated base address detection
Feature: New advanced search features
Feature: Address display modes
Feature: Allow users to specify file name displayed in offsets
Feature: Show addresses relative to a fixed base address
Feature: Added ability to only show ‘live’ stack variables
Feature: Show variable increments as +=
Feature: Indention lines can now be highlighted
Feature: Cross references can now navigate to precisely the correct IL instruction in many more situations
Feature: Cross references will now preview according to currently displayed IL type
Feature: New History Sidebar
Feature: New actions to quickly adjust the selection size in linear and hex view
Feature: Add "Navigate to Matching Brace" action
Feature: Add "Reopen Current File" ui action
Feature: Added “Create Array” to the Linear View context menu
Feature: Add option to view stack variable offset from stack pointer (or other register)
Feature: Setting to skip rendering braces for single line code blocks
Improvement: Project browser tab is now closable
Improvement: Display of Product Information dialog in Enterprise edition
Improvement: Enumeration member in enumeration selection dialog is confirmed on double click
Improvement: Use platform-specific names for keybinds in Keybind View
Improvement: Allow editing multiple external locations at once
Improvement: Added copy actions to TypeBrowserView
Improvement: Added setting to disable background parsing in change Type dialog
Improvement: Automatically update the element count when the type is changed in the create array dialog
Improvement: Populate default name for enums and unions in type view
Improvement: Offer to create structure when pressing s while PossibleAddressToken is selected
Improvement: Ask(1) the user to confirm the action when renaming a type to an existing one or creating a type with existing name
Improvement: Fallback to clang for name demangling when Binary Ninja’s demanglers fail
Improvement: Option to have exact search matches come first in Type Browser
Improvement: Make call param hints more configurable & support more param types for hint deduplication
Improvement: Improved performance when loading DebugInfo
Improvement: New lines now shown around code blocks
Improvement: Remove ‘Installation Instructions’ tab from plugin manager
Improvement: New backend for servicing plugin manager
Improvement: Added maximum version for plugins
Improvement: Faster loading of files with lots of strings on Windows
Improvement: Make ReportCollectionWidget remember graph scale too
Fix: Issue causing log spew when analyzing project files
Fix: Issue causing filter to not display proper count in cross references
Fix: Project browser interactions happening on deselected items
Fix: bndb extension duplication on "Save As"
Fix: Issue where the 'Run Script' actions were not usable
Fix: Issue with log view filtering
Fix: Issue with the clarity of when FilterEdit controls were disabled
Fix: Issue where clang could error but not report those errors to the UI
Fix: Issue where sidebar widgets could be inserted into the wrong location if there is a floating widget open
Fix: Issue where bndbs using nested folders could crash or hang upon opening
Fix: Issue with tab bar sizing
Fix: Issue with “import type by GUID”
Fix: Issue(s) with copying the text of an opcode token
Fix: Issue where installing package dependencies could fail
Fix: Memory leak in Type Archives
Fix: Issue causing type dialog to be unresponsive when large number of types are in use
Fix: Crash when using "Create Array" on undefined bytes in a structure
Fix: Bug with create struct members referenced
Fix: Bug in type propagation when accessing members of stack structures
Fix: Crash on progress cancel when opening a database
Fix: Crash when using LLDB adapter on Windows in free version
Fix: Bug causing loss of type information when duplicating expressions in HLIL
Fix: Bug causing non-deterministic application of PDB debug information
Fix: Issue were ARM ELF mapping symbols could be defined as actual symbols
Fix: Issue where creating an array could overlap function boundaries
Fix: Crash while saving under some conditions
Fix: Display of possible values in uidf dialog
Fix: Edge case setting uidf value in mlil-ssa
Fix: Display of constant intermediate values
Fix: Crash in CreateArrayDialog
Fix: Issue causing ‘Append Field’ action to not show up in type editor
Fix: Location resetting when changing options in graph view
Fix: Potential crash when opening a BNDB with external links
Fix: Issue with focusing the Command Palette on some Linux distributions
Fix: Crash on latest Fedora
Fix: Crash when analyzing some binaries
Fix: Crash when adding tags to cross references
Fix: search/find dialog does not trim the input string
Fix: Symbols list search now uses AND rather than OR for search terms
Fix: Hang when selecting “clear variable type” from variables sidebar
Fix: Issue where the description of a project wasn’t being set
Fix: Non-deterministic application of PDB type information
Fix: Issue preventing “Call Type Override” from working on imported symbols
Fix: Issue preventing the display of types after saving a database
Fix: Issue causing DataVariables to infer the wrong type
Fix: Issue preventing case labels from showing up in disassembly blocks
Fix: Issue where empty lines could show up when filtering items in the symbols list
Fix: Crash when quickly cancelling remote SSO authentication
Fix: Issue on macos where progress dialog wouldn’t make progress without UI interaction
Fix: Issue preventing installation of some plugins on systems with non-ascii paths
Fix: Some HLIL cross references appeared to be duplicates
Fix: Python console magic variables for lifted_il, mmlil, mmlil_ssa
Fix: Bug where certain cross references would cease to be navigable in higher IL views

Binary View Improvements
Feature: Objective-C Processing is now automatic on binaries with Objective-C Metadata. Call rewrites will be automatically enabled.
Feature: Objective-C msgSend stubs will now be automatically inlined.
Feature: objc_msgSend will automatically be overridden with a call type based on the amount of arguments in the selector
Feature: Objective-C ARMv7/thumb2 support
Feature: Added support for Objective-C Categories and 'Lazy Classes'
Feature: Massive update to macOS and iOS type libraries
Feature: Added support for md1rom BinaryView
Feature: PE view now parses the resource section
Improvement: Vast reliability improvements to Objective-C call rewrites
Improvement: Enhanced error handling and recovery in malformed Objective-C binaries
Improvement: Better handling for Objective-C information in Swift binaries
Improvement: Better handling for Objective-C metaclass definitions
Improvement: Better automatic naming and typing for Objective-C metadata
Improvement: Vastly improved handling for CFStrings including UTF16 support and appropriate variable naming
Improvement: Objective-C Mark __objc_ivar as const, define names for class/super refs. This improves disassembly quality
Improvement: Objective-C Parse CFStrings separately from primary Objective-C Processing, allowing CFString metadata to be processed in binaries with no Objective-C information. Resolves #5610
Improvement: Objective-C Non-lazy Category Support, improve naming for category variables
Improvement: Objective-C Parse protocol information. Resolves #5589
Improvement: Unnamed functions pointed to by the .init_array/.fini_array/.ctors/.dtors sections now get names indicating this fact
Fix: Issue with how guardCFCheckFunctionPointer and guardCFDispatchFunctionPointer were parsed

Analysis
Feature: Add support for variable width delay slots
Feature: Automatic recognition of TEB in user mode Windows binaries
Feature: Add support for binaries with multiple entry points
Feature: Apply DWARF debug info to stack variables
Feature: Propagate enumerations to switch case values
Feature: Add support for local debug directories
Feature: Add support for __chain_start section parsing in Mach-O binaries
Feature: Add support for disabling site-specific outlining when full-confidence types are available
Feature: Fold jump table bounds check into switch statement default case under more conditions
Feature: Improve Windows Control Flow Guard re-writing
Feature: Add support for downloading symbols through debuginfod
Improvement: Enhanced correctness of intrinsic instruction that have memory side-effects
Improvement: Builtin outlining is more selectively applied
Improvement: Better recovery of strings in data sections
Improvement: memcpy outlining heuristic enhancement when considering variable sized writes
Improvement: Simplify a&a, a|a, a^a
Improvement: Simplify HLIL conditions of the form a || (!a && b) and recognize more if/else constructs
Improvement: Simplify !(!a && !b) => a || b and !(!a || !b) => a && b
Improvement: FloatToInt(FloatTrunc()) is now simplified to just FloatToInt
Improvement: Simplify (x - -10) => (x + 10)
Improvement: ? 1 : 0 == 1 simplified to
Improvement: Simplify A << 0 and A >> 0 to A
Improvement: Simplify A >> N >> M and A << N << M to A <> (N + M)
Improvement: Simplify RCR X, 1, 0 to X >> 1
Improvement: Large c++ template simplifier performance improvement
Improvement: Large performance improvement in applying DWARF debug info
Improvement: Large PDB parsing performance improvements
Improvement: Clearer auto-generated type definintions
Improvement: Load all types from DWARF even if they are unused
Improvement: Better stack string recovery
Improvement: Better definitions for NT_TIB and things that reference it
Fix: Rendering of floor, ceil, fsqrt, ftrunc, and fabs functions in Pseudo-C
Fix: partial value calculation for signed ranges with step != 1
Fix: Rare duplicate goto labels in HLIL
Fix: Crash when MarkLabel is not called as required
Fix: Handling of compressed debug sections in 32-bit ELFs
Fix: Issue when rebasing Objective-C binaries
Fix: Issue preventing functions from updating when structures they reference change
Fix: Issue where databases with workflow_objc enabled would occasionally reanalyze after being reopened
Fix: Issue with rebasing in relation to applying DWARF debug info
Fix: Issue with handling of split registers
Fix: Crash whenever legacy databases were missing type information expected by Objective-C Call rewrites
Fix: Issue where constant pointers to structures didn’t resolve as intended
Fix: Issue where blank lines would show up as the same address as the function itself
Fix: Some issues 1 with global pointer value discovery effecting dataflow
Fix: Hang when simplifying some array dereferences
Fix: Escaping of utf-8 encoded strings

API
Feature: Add additional python apis for opening and closing projects
Feature: uiSelectionAction setting type is a setting type that can present a file picker or trigger an action
Feature: based pointer support
Feature: Added platform callback to allow specification of type parser arguments
Improvement: Improved traverse API to support shallow traversal
Fix: get_functions_by_name when platform is passed
New API: Additional NotificationDispatcher APIs added
New API: BinaryReader.TryReadPointer
New API: BinaryDataNotifications for undo actions
New API: BNCustomPlatform
New API: BaseAddressDetection
New API: Platform::GetGlobalRegsiters & Platform::GetGlobalRegisterType
New API: BinaryView::AddToEntryFunctions
New API: BinaryView::GetAllEntryFunctions
New API: Python methods for getting/setting default calling convention
New API: Create your own magic python variables
New API: get_expr, copy_expr, raw_operands, get_expr_count
New API: ILIsCFGProtected attribute on CFG and XFG Calls in Windows binaries
New API: getThemeHighlightColor
Deprecated: loader.architecture in favor of loader.platform

Architecture & Platform
Feature: Added architecture detection support for RISC-V 32-bit (rv32gc) and RISC-V 64-bit (rv64gc)
Improvement: x86 Enhanced lifting for movd and movq instructions
Improvement: PowerPC: added lifting for: EXTSW LD LDU LDUX LDX SLD SRAD SRADI SRD STD STDU STDUX STDX instructions
Improvement: add lifting for scvtf, scalar integer/float variants
Improvement: Updated x86 architecture to use XED v2024.04.01
Improvement: Recognize uClibc MIPS ELF PLT entries
Improvement: Added additional arm system registers
Fix: RISC-V instructions CSRRW/CSRRS/CSRRC
Fix: AArch64 LDP/LDNP/LDPSW lifting edge cases
Fix: AArch64 lifting for LDADD* and STADD* family of instructions
Fix: Issue where some obfuscated ELF binaries could be detected as little endian
Fix: Issue with post index of PC

Debugger
Feature: Support for windows dump files
Feature: Added TTD buttons in the debugger sidebar for reverse go/step into/step over
Feature: Support installing WinDbg and making a TTD recording directly from within the debugger
Feature: Added reverse debugging APIs
Feature: Use the MemoryMap API to represent the memory regions for the debugger. Do not lose analysis after debugging
Improvement: Debugger now avoids excessive analysis updates which improves performance when stepping through code
Improvement: Massive performance improvement while debugging on Windows
Fix: Not rebasing the input view during headless usage
Fix: Issue with navigating while using the debugger
Fix: Ensure not to hide the console window of the running process on Windows
Fix: Out-of-state when the user kills the process while it is running
Fix: Various issues ([1], [2]) when using the debugger in the free version
Fix: debugging arm64e files on macOS now works

Enterprise
Feature: Complete refactor of the entire collaboration system (small performance improvement now, but required for future work)
Improvement: Overhauled entire first-run process, which now more gracefully handles specifying your license server and/or named license
Improvement: Merged all client documentation into our user documentation
Fix: No longer fail silently if your license server is an invalid host or protocol
Fix: Can now properly resize the columns in the Remote Dialog
Fix: Properly pass file events through the license checkout process (double-clicking a file now works if you need to check out a license while starting the client)
Fix: Can now delete a type archive in a remote project on Windows
Fix: Python API remote.connect now properly checks environment variables for credentials
Fix: Python API request_authentication_token now returns values other than None
Fix: Using an external link to navigate to a file that does not exist in the local project cache no longer requires a client restart
Fix: Users no longer stay in the User Positions list after they have closed the file
Fix: A series of errors during merge conflicts arising from a bad any_cast of a string

Documentation
Feature: Added Triage documentation, including new BASE feature
Feature: Added BinaryView to concepts documentation
Improvement: Documentation on Intel CPU bug in troubleshooting
Improvement: Debug Info section includes how to prevent it from applying (and now has a screenshot)
Improvement: Updated Walking ILs concept section
Improvement: Compression on images for space-savings
Improvement: Better highlighting for search results in user documentation

Miscellaneous Notes
All the architecture and view plugins have been moved from individual repos to binaryninja-api ? #Mono-repo-4-lyfe ?
New Open Source Component! Our PDB Plugin! ?
End of life: We are have dropped for Ubuntu 20.04. 4.1 will support Ubuntu 22.04 and 24.04.
End of life: We have dropped support for Python 3.8. Python 3.9 is now the oldest version we support.

Decompiler Improvements
• Parameter Rejection
• Improved Objective-C
• Automatic Outlining

Debugger

Type Interactions
• Create Array Dialog
• Import/Export Header
• Enumeration Chooser

More Windows Improvements
• SEH Prolog/Epilog Inlining
• Type Libraries and Signatures

Enterprise Improvements
• Named Snapshots
• SAML Support

UI Updates
• Feature: Add setting to allow you to hide type casts
• Feature: Add ability to restore layouts and locations for all sync/no-sync groups
• Feature: Added sticky header on LinearView to ensure function’s header is always visible
• Improvement: Updated to Qt 6.4.1
• Improvement: History for find dialog search queries
• Improvement: Analysis will now automatically start after cancelling an analysis hold
• Improvement: Hide unused tag types in the tag list
• Fix: Navigation from cross references in HLIL and related views
• Fix: UI Hang when attempting to display very large empty structures
• Fix: Occasional crash of UI due to Qt bug
• Fix: Occasional crashes from missing null check in various dialogs
• Fix: Occasional crash when resetting filter options from strings view
• Fix: Occasional crash when functions are removed
• Fix: Occasional crash when closing find or goto dialog
• Fix: Bug where pane would switch to the wrong view
• Fix: Make TriageView update as analysis updates (exports, base address, etc.)Hide Casts >
• Fix: COMBINE expression in Pseudo-C
• Fix: Crash when creating an array of void in LinearView
• Fix: Some cases were LinearView display became stale
• Fix: Escape characters are now shown in StringsView
• Fix: Issue where some symbols could be hidden after database save/restore

Binary View Improvements
• Improvement: Parse and handle Chained Fixup in Mach-Os
• Improvement: Add setting for max number of entries in ELF section header array
• Improvement: PE better parsing and DataVariable creation of various structures
• Fix: Macho Fix an issue with processing Chained Fixups in binaries with split segments
• Fix: Macho Fix an issue with processing of DYLD_CHAINED_PTR_ARM64E_KERNEL format fixups
• Fix: Macho Fix an issue with processing DYLD_CHAINED_PTR_START_NONE

Analysis
• Feature: Automatically un-inline compiler builtin expressions operating on constant data (memcpy, strcpy, memset, etc)
• Feature: Automatic detection of SEH Prolog and Epilog functions
• Improvement: Greatly improved heuristics for detecting parameters of external function calls
• Improvement: Disjoint variable analysis (leads to better decompilation)
• Improvement: Objective-C analysis now creates types for classes and defines their ivars
• Improvement: Automatically add function for resolvers stub in .plt sections
• Improvement: Dataflow for partial access of unsigned ranges
• Improvement: Dataflow for partial variable value overwrites
• Improvement: Dataflow support for offset partial value of signed ranges
• Improvement: Many other dataflow fixes and improvements
• Improvement: Function signature libraries for ucrt
• Improvement: Dataflow Add support for constant propagation through partially defined registers.
• Improvement: Add support for Virtual Thunks in the MS demangler
• Improvement: Add this pointer in some MS demangler cases
• Fix: Issue where some cross references in structures wouldn’t be populated
• Fix: Issue causing every function symbol imported through the DebugInfo API (PDBs in particular) to be marked as exported (• GlobalSymbolBinding)
• Fix: Many bugs in creating of types by the PDB plugin
• Fix: Variadic function types created by the PDB plugin
• Fix: Some structure parameter locations in function created by the PDB plugin
• Fix: Handling of multiple symbols at the same address created by the PDB plugin
• Fix: Crash parsing empty string
• Fix: Crash in tailcall analysis when a block has no source block

API
• New API: TypeLibrary APIs for C++
• New API: MetadataChoiceDialog class
• New API: BinaryView::GetDependencySortedTypes
• New API: TypePrinter::PrintAllTypes
• New API: Type::IsVolatile
• New API: MLIL/HLIL replace_expr
• New API: Function.inline_during_analysis
• New API: Snapshot::SetName
• New API: EnterpriseServer::IsFloatingLicense
• Improvement: Add support for comparison operators in parse_expression
• Improvement: Add support for custom magic values in parse_expression
• Improvement: Prevent creation of structures larger than INT64_MAX
• Improvement: Updated Rust version for Rust API
• Improvement: Add TypesContainer to Python UI bindings
• Deprecation: Section.__len__ in favor of Section.length as python doesn’t support returning UINT64_MAX from this API
• Fix: Regression in BasicBlock.outgoing_edges/incoming_edges source/target
• Fix: import_library_type, import_library_object were implemented incorrectly
• Fix: Prevent integer overflow in Structure::AddMemberAtOffset
• Fix: Crash when post-processing empty set of lines
• Fix: Many type hint improvements
• Fix: Function.set_call_type_adjustment
• Fix: GotoLabel.name is not settable

Architectures
• Armv7/Thumb2: Many fixes that greatly improve linear sweep accuracy
• Arm64: Fixed the R_AARCH64_PREL64, R_AARCH64_ADD_ABS_LO12_NC, R_AARCH64_CALL26, and R_AARCH64_JUMP26 relocations

Debugger
• Feature: Support overriding the current instruction pointer
• Feature: Show stack traces in the stack frame widget
• Feature: Suspend/resume threads
• Feature: List threads in other locations
• Feature: List running processes when attaching to a PID
• Feature: New action to create a stack view in a new panel
• Feature: Support using register values in the expression parser
• Improvement: Double-clicking a breakpoint navigates to its address
• Improvement: Show the end address of modules in the modules widget
• Improvement: Add jump to instruction pointer action to debugger menu
• Improvement: New setting for enabling/disabling stack annotations
• Improvement: Properly detect LLDB launch failure
• Improvement: Rework the stack frame widget. Support navigating to ip, sp, and fp from it
• Improvement: Properly handle step return failures in LLDB
• Improvement: Add keybindings to the tooltip of control buttons
• Improvement: Improvement to the register Python API
• Improvement: Update the register widget after editing the register value from the Python API
• Improvement: Abort the analysis on the live view before quitting or detaching the target
• Improvement: New setting (debugger.aggressiveAnalysisUpdate) for whether to mark the entire binary view as modified when the target stops
• Fix: Crash when sending stdin input using DebuggerController.write_stdin
• Fix: Not saving command line arguments into the database
• Fix: LLDB is unable to launch the target locally after disconnecting from a debug server
• Fix: Register name/value column width not wide enough in some situations
• Fix: Debugger modules list last column does not stretch
• Fix: Debugger not navigating to the entry point after relaunching the target
• Fix: Hang when repeatedly stepping very fast
• Fix: Cannot read low addresses in the debugger binary view
• Fix: DbgEng fails to launch the target when the .exe file name is different from the PDB file name
• Fix: LLDB fails to launch ELF binary which has no dynamic loader
• Fix: dbg magic variable missing in the Python console
• Fix: DbgEng hangs when the engine asks the user for additional input
• Fix: Debugger hangs when the user tries to quit the target while the analysis update is still running

Enterprise
• Feature: A file changelog has been added to view changeset descriptions and their authors (similar to git log)
• Feature: Docker images are now available for hosting the Enterprise server on ARM systems
• Improvement: Various small UI improvements
• Improvement: Added missing documentation for configuring LDAP as an SSO provider
• Fix: A number of missing NULL checks are no longer missing

Windows 10 всё работает!