{"action":"created","issue":{"url":"https://api.github.com/repos/radare/radare2/issues/3190","labels_url":"https://api.github.com/repos/radare/radare2/issues/3190/labels{/name}","comments_url":"https://api.github.com/repos/radare/radare2/issues/3190/comments","events_url":"https://api.github.com/repos/radare/radare2/issues/3190/events","html_url":"https://github.com/radare/radare2/issues/3190","id":103830217,"number":3190,"title":"False Positive Strings","user":{"login":"Manouchehri","id":7232674,"avatar_url":"https://avatars.githubusercontent.com/u/7232674?v=3","gravatar_id":"","url":"https://api.github.com/users/Manouchehri","html_url":"https://github.com/Manouchehri","followers_url":"https://api.github.com/users/Manouchehri/followers","following_url":"https://api.github.com/users/Manouchehri/following{/other_user}","gists_url":"https://api.github.com/users/Manouchehri/gists{/gist_id}","starred_url":"https://api.github.com/users/Manouchehri/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Manouchehri/subscriptions","organizations_url":"https://api.github.com/users/Manouchehri/orgs","repos_url":"https://api.github.com/users/Manouchehri/repos","events_url":"https://api.github.com/users/Manouchehri/events{/privacy}","received_events_url":"https://api.github.com/users/Manouchehri/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-08-29T05:25:47Z","updated_at":"2015-08-29T05:32:19Z","closed_at":null,"body":"I don't think I have enough information to give a proper bug report, but @crowell suggested I try.\r\n\r\nThe binary is a deobfuscated firmware, which contains some ARM little-endian and a lot of other mess. It seems that r2 is having a harder time with strings compared to IDA, not sure why.\r\n\r\n# radare2\r\n```\r\n0x0 16 15 SAMSUNG_SSD_BIN\r\n0x10 20 19 0.01STH00001OEM_GEN\r\n0x2c 14 13 2013121819:43\r\n0x579 8 7  pG\\vIHh\r\n0x59b 16 15  pG\\a pG\\b pG\\t pG\r\n0x5ae 7 6 P \\nJQh\r\n0x689 5 4  pG@\r\n0x6b2 5 4 LF3H\r\n0x6f8 5 4 \"H80\r\n0x750 7 6 H\\a\\fI\\f9\r\n0x769 6 5 H\\f8Ah\r\n0x79d 7 5 hб@%O\r\n0x7c4 6 5 @2@Fk\r\n0x7e3 5 4 C4NO\r\n0x7ef 12 11 %1I2O\\f9O`xl\r\n0x800 8 7 Hh/I@l \r\n0x80f 40 19 c 矰Ǻ 瓰俺ô伴苰⅀نꏰ俼蓰⅀ن黰俼\r\n0x84d 6 5 #@F?!\r\n0x869 6 5 \")F8F\r\n0x89b 6 5 @1i 2\r\n0x932 9 8 \\bI\\bJ\\tH\\b`\r\n0x961 5 4 HAk!\r\n0x967 7 6 QAcAkA\r\n0x96f 6 5 qAcpG\r\n0x979 5 4 HAkA\r\n0x97f 6 5 QAcpG\r\n0x99d 8 7 F5I5Lpj\r\n0x9d2 5 4 *I`k\r\n0xa10 7 6 \\eHAk!y\r\n0xa4c 9 8 \\nJ0F!i 2\r\n0xa70 5 4 p@`G\r\n0xafd 36 17 !à脡酲쥫Ȁ釔쥫āǕ!à섡灲G氀舮\r\n0xbe6 6 5 \\fL`h \r\n0xbee 6 5 `` h \r\n0xbf5 6 5 ` `\\bH\r\n0xbfb 5 4 b h@\r\n0xc01 5 4 ` `B\r\n0xc2d 5 4 Lah!\r\n0xc34 6 5 a`!h!\r\n0xc47 7 4 ܀(\\bа\r\n0xc5d 7 5 ѡb h@\r\n0xc65 5 4 ` `B\r\n0xc99 6 5 H `\\n \r\n0xca7 6 5  ``\\n \r\n0xcc1 5 4 D\\vhC\r\n0xce9 6 5   a\\n \r\n0xd14 6 5  ` h \r\n0xd34 6 5  ` h \r\n0xf5e 6 5 \\rM\\b O\r\n0xf79 8 7  $`!h\"h\r\n```\r\n\r\n# IDA\r\n```\r\nROM:00000000 00000010 C SAMSUNG_SSD_BIN                    \r\nROM:00000010 00000014 C 0.01STH00001OEM_GEN                \r\nROM:000017BB 00000008 C I@h\\bapG                           \r\nROM:000071FF 00000005 C U'5t?                              \r\nROM:00007212 00000007 C \\np}'/$\\\\                          \r\nROM:000072D9 00000005 C w%EeN                              \r\nROM:000072F4 00000007 C <:;fH\\vp                           \r\nROM:0000730C 00000005 C DW>!O                              \r\nROM:0000733E 00000005 C W_G#K                              \r\nROM:00024498 00000020 C \\r\\n [UART REGISTER R/W START] \\r\\n\r\nROM:000244B8 00000008 C [Write]                            \r\nROM:000244C0 00000007 C  Addr:                             \r\nROM:000244C8 00000007 C  Data:                             \r\nROM:000244D0 00000009 C  Done.\\r\\n                         \r\nROM:000244DC 00000007 C [Read]                             \r\nROM:0002E1E8 0000000F C 00000000000000                     \r\nROM:0002E1F8 00000009 C EXT0BB6Q                           \r\nROM:0002E204 00000011 C SAMSUNG SATA SSD                   \r\nROM:0002E21C 00000005 C DXM0                               \r\nROM:00031DC8 0000000C C sscl_malloc                        \r\nROM:00034085 00000005 C z\\x1Bw*{                           \r\nROM:000340A4 0000000A C FW_ASSERT                          \r\nROM:000340D4 0000000E C ARM_EXCEPTION                      \r\nROM:00038839 00000005 C G h\\n\\\"                            \r\nROM:00038877 00000006 C %!'.F                              \r\nROM:0003889D 00000007 C G hR!*F                            \r\nROM:000388A9 00000007 C G hU!2F                            \r\nROM:000388B5 00000005 C G h:F                              \r\nROM:000388D3 00000005 C h\\vi\\\\!                            \r\nROM:000388E4 00000008 C secu0.01                           \r\nROM:00038925 00000005 C ipGKJ                              \r\nROM:00038A54 00000005 C clas\\\\                             \r\nROM:00038A64 00000006 C secu]I                             \r\nROM:00038ACF 00000005 C hGH``                              \r\nROM:00038AE1 00000005 C `U!0h                              \r\nROM:00038B0F 00000005 C FDi(F                              \r\nROM:00038B55 00000005 C G&Hah                              \r\nROM:00038B83 00000005 C `U!8h                              \r\nROM:00038BA5 00000005 C FDi0F                              \r\nROM:00038C72 0000001A C  \\\"$&(*,.02468:<>@BDFHJLN          \r\nROM:00038D6F 00000005 C hJjYF                              \r\nROM:00038D8F 00000005 C \\\")F F                             \r\nROM:00038E0B 00000007 C \\\"SF!F8F                           \r\nROM:00038E25 00000005 C !+F2F                              \r\nROM:00038E3D 00000005 C FDi@F                              \r\nROM:00038E63 00000005 C \\\"SF!F                             \r\nROM:00038EB3 00000005 C $(F!F                              \r\nROM:00038EC6 00000005 C pGpG-                              \r\nROM:00038F72 00000008 C 0h9FBj0F                           \r\nROM:00039583 00000005 C FDi@F                              \r\n```"},"comment":{"url":"https://api.github.com/repos/radare/radare2/issues/comments/135943338","html_url":"https://github.com/radare/radare2/issues/3190#issuecomment-135943338","issue_url":"https://api.github.com/repos/radare/radare2/issues/3190","id":135943338,"user":{"login":"radare","id":917142,"avatar_url":"https://avatars.githubusercontent.com/u/917142?v=3","gravatar_id":"","url":"https://api.github.com/users/radare","html_url":"https://github.com/radare","followers_url":"https://api.github.com/users/radare/followers","following_url":"https://api.github.com/users/radare/following{/other_user}","gists_url":"https://api.github.com/users/radare/gists{/gist_id}","starred_url":"https://api.github.com/users/radare/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/radare/subscriptions","organizations_url":"https://api.github.com/users/radare/orgs","repos_url":"https://api.github.com/users/radare/repos","events_url":"https://api.github.com/users/radare/events{/privacy}","received_events_url":"https://api.github.com/users/radare/received_events","type":"User","site_admin":false},"created_at":"2015-08-29T05:32:19Z","updated_at":"2015-08-29T05:32:19Z","body":"R2 find strings inside the blob, ida takes them from code analysisndata references.\n\nThose false positives seems to come up more frequently when the binary is an unknown format so it have no section boundaries to restrict the search.\n\nMaybe we can add a command to find strings by using data refeences in the code analysis. \n\n\n\n> On 29 Aug 2015, at 07:25, David Manouchehri <notifications@github.com> wrote:\n> \n> I don't think I have enough information to give a proper bug report, but @crowell suggested I try.\n> \n> The binary is a deobfuscated firmware, which contains some ARM little-endian and a lot of other mess. It seems that r2 is having a harder time with strings compared to IDA, not sure why.\n> \n> radare2\n> \n> 0x0 16 15 SAMSUNG_SSD_BIN\n> 0x10 20 19 0.01STH00001OEM_GEN\n> 0x2c 14 13 2013121819:43\n> 0x579 8 7  pG\\vIHh\n> 0x59b 16 15  pG\\a pG\\b pG\\t pG\n> 0x5ae 7 6 P \\nJQh\n> 0x689 5 4  pG@\n> 0x6b2 5 4 LF3H\n> 0x6f8 5 4 \"H80\n> 0x750 7 6 H\\a\\fI\\f9\n> 0x769 6 5 H\\f8Ah\n> 0x79d 7 5 hб@%O\n> 0x7c4 6 5 @2@Fk\n> 0x7e3 5 4 C4NO\n> 0x7ef 12 11 %1I2O\\f9O`xl\n> 0x800 8 7 Hh/I@l \n> 0x80f 40 19 c 矰Ǻ 瓰俺ô伴苰⅀نꏰ俼蓰⅀ن黰俼\n> 0x84d 6 5 #@F?!\n> 0x869 6 5 \")F8F\n> 0x89b 6 5 @1i 2\n> 0x932 9 8 \\bI\\bJ\\tH\\b`\n> 0x961 5 4 HAk!\n> 0x967 7 6 QAcAkA\n> 0x96f 6 5 qAcpG\n> 0x979 5 4 HAkA\n> 0x97f 6 5 QAcpG\n> 0x99d 8 7 F5I5Lpj\n> 0x9d2 5 4 *I`k\n> 0xa10 7 6 \\eHAk!y\n> 0xa4c 9 8 \\nJ0F!i 2\n> 0xa70 5 4 p@`G\n> 0xafd 36 17 !à脡酲쥫Ȁ釔쥫āǕ!à섡灲G氀舮\n> 0xbe6 6 5 \\fL`h \n> 0xbee 6 5 `` h \n> 0xbf5 6 5 ` `\\bH\n> 0xbfb 5 4 b h@\n> 0xc01 5 4 ` `B\n> 0xc2d 5 4 Lah!\n> 0xc34 6 5 a`!h!\n> 0xc47 7 4 ܀(\\bа\n> 0xc5d 7 5 ѡb h@\n> 0xc65 5 4 ` `B\n> 0xc99 6 5 H `\\n \n> 0xca7 6 5  ``\\n \n> 0xcc1 5 4 D\\vhC\n> 0xce9 6 5   a\\n \n> 0xd14 6 5  ` h \n> 0xd34 6 5  ` h \n> 0xf5e 6 5 \\rM\\b O\n> 0xf79 8 7  $`!h\"h\n> IDA\n> \n> ROM:00000000 00000010 C SAMSUNG_SSD_BIN                    \n> ROM:00000010 00000014 C 0.01STH00001OEM_GEN                \n> ROM:000017BB 00000008 C I@h\\bapG                           \n> ROM:000071FF 00000005 C U'5t?                              \n> ROM:00007212 00000007 C \\np}'/$\\\\                          \n> ROM:000072D9 00000005 C w%EeN                              \n> ROM:000072F4 00000007 C <:;fH\\vp                           \n> ROM:0000730C 00000005 C DW>!O                              \n> ROM:0000733E 00000005 C W_G#K                              \n> ROM:00024498 00000020 C \\r\\n [UART REGISTER R/W START] \\r\\n\n> ROM:000244B8 00000008 C [Write]                            \n> ROM:000244C0 00000007 C  Addr:                             \n> ROM:000244C8 00000007 C  Data:                             \n> ROM:000244D0 00000009 C  Done.\\r\\n                         \n> ROM:000244DC 00000007 C [Read]                             \n> ROM:0002E1E8 0000000F C 00000000000000                     \n> ROM:0002E1F8 00000009 C EXT0BB6Q                           \n> ROM:0002E204 00000011 C SAMSUNG SATA SSD                   \n> ROM:0002E21C 00000005 C DXM0                               \n> ROM:00031DC8 0000000C C sscl_malloc                        \n> ROM:00034085 00000005 C z\\x1Bw*{                           \n> ROM:000340A4 0000000A C FW_ASSERT                          \n> ROM:000340D4 0000000E C ARM_EXCEPTION                      \n> ROM:00038839 00000005 C G h\\n\\\"                            \n> ROM:00038877 00000006 C %!'.F                              \n> ROM:0003889D 00000007 C G hR!*F                            \n> ROM:000388A9 00000007 C G hU!2F                            \n> ROM:000388B5 00000005 C G h:F                              \n> ROM:000388D3 00000005 C h\\vi\\\\!                            \n> ROM:000388E4 00000008 C secu0.01                           \n> ROM:00038925 00000005 C ipGKJ                              \n> ROM:00038A54 00000005 C clas\\\\                             \n> ROM:00038A64 00000006 C secu]I                             \n> ROM:00038ACF 00000005 C hGH``                              \n> ROM:00038AE1 00000005 C `U!0h                              \n> ROM:00038B0F 00000005 C FDi(F                              \n> ROM:00038B55 00000005 C G&Hah                              \n> ROM:00038B83 00000005 C `U!8h                              \n> ROM:00038BA5 00000005 C FDi0F                              \n> ROM:00038C72 0000001A C  \\\"$&(*,.02468:<>@BDFHJLN          \n> ROM:00038D6F 00000005 C hJjYF                              \n> ROM:00038D8F 00000005 C \\\")F F                             \n> ROM:00038E0B 00000007 C \\\"SF!F8F                           \n> ROM:00038E25 00000005 C !+F2F                              \n> ROM:00038E3D 00000005 C FDi@F                              \n> ROM:00038E63 00000005 C \\\"SF!F                             \n> ROM:00038EB3 00000005 C $(F!F                              \n> ROM:00038EC6 00000005 C pGpG-                              \n> ROM:00038F72 00000008 C 0h9FBj0F                           \n> ROM:00039583 00000005 C FDi@F                              \n> —\n> Reply to this email directly or view it on GitHub.\n> \n"}}