Stuck on an issue?
Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.
And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.
NeLoader: AddressOverflowException
See original GitHub issueDescribe the bug AddressOverflowException when importing an old 16-bit game
To Reproduce Steps to reproduce the behavior:
- Download shareware Stars!: http://wiki.starsautohost.org/files/stars26jrc4.zip
- Extract the EXE
- Start a new ghidra project
- Import the starsjrc4.exe with default options
Expected behavior I expect it not to crash.
Error Output
Error importing file: starsjrc4.exe
java.lang.RuntimeException: ghidra.program.model.address.AddressOverflowException: Address Overflow in add: fb1c:0000 + 0x2043f
at ghidra.app.util.opinion.NeLoader.processResourceTable(NeLoader.java:344)
at ghidra.app.util.opinion.NeLoader.load(NeLoader.java:130)
at ghidra.app.util.opinion.AbstractLibrarySupportLoader.doLoad(AbstractLibrarySupportLoader.java:346)
at ghidra.app.util.opinion.AbstractLibrarySupportLoader.loadProgram(AbstractLibrarySupportLoader.java:83)
at ghidra.app.util.opinion.AbstractProgramLoader.load(AbstractProgramLoader.java:114)
at ghidra.plugin.importer.ImporterUtilities.doSingleImport(ImporterUtilities.java:360)
at ghidra.plugin.importer.ImporterDialog.lambda$okCallback$6(ImporterDialog.java:363)
at ghidra.util.task.TaskLauncher$1.run(TaskLauncher.java:93)
at ghidra.util.task.Task.monitoredRun(Task.java:128)
at ghidra.util.task.TaskLauncher.lambda$startBackgroundThread$2(TaskLauncher.java:315)
at java.base/java.lang.Thread.run(Thread.java:834)
Caused by: ghidra.program.model.address.AddressOverflowException: Address Overflow in add: fb1c:0000 + 0x2043f
at ghidra.program.model.address.AbstractAddressSpace.addNoWrap(AbstractAddressSpace.java:455)
at ghidra.program.model.address.GenericAddressSpace.addNoWrap(GenericAddressSpace.java:21)
at ghidra.program.model.address.GenericAddress.addNoWrap(GenericAddress.java:218)
at ghidra.program.database.mem.MemoryMapDB.checkRange(MemoryMapDB.java:1743)
at ghidra.program.database.mem.MemoryMapDB.createInitializedBlock(MemoryMapDB.java:468)
at ghidra.app.util.MemoryBlockUtil.createInitializedBlock(MemoryBlockUtil.java:249)
at ghidra.app.util.MemoryBlockUtil.createInitializedBlock(MemoryBlockUtil.java:186)
at ghidra.app.util.opinion.NeLoader.processResourceTable(NeLoader.java:339)
... 10 more
---------------------------------------------------
Build Date: 2019-Feb-28 1236 EST
Ghidra Version: 9.0
Java Home: ~/apps/java/jdk-11.0.2
JVM Version: Oracle Corporation 11.0.2
OS: Linux 4.12.14-lp150.12.48-default amd64
Workstation: ~
Issue Analytics
- State:
- Created 5 years ago
- Comments:8
Top Results From Across the Web
no working - page 2 - Support - Beloader Forum - Powered by ...
hi everybody!! my problem is !!! its flashing blue and never turn green ..it said succesfull in the set up menu and when...
Read more >JCC LogMiner Loader
Each Rdb row has a unique internal address called its data- ... cated by the Loader, an overflow exception may be generated by...
Read more >4 The CLR (Common Language Runtime)
NET types, the addressing space and threads. When an assembly is executed, ... version will be loader no matter which version you specify....
Read more >Pratical .NET2 and C#2 - PDFDOKUMENT.COM
This book addresses itself to you as soon as you have an interest in ... tests for an overflow and raises the OverflowException...
Read more >appdomain - Page 10 - Developer IT
The assemblies seem to beloading and executing fine, ... StackOverflowException throws often when .net application built with Debug mode.
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
@caheckman fixed this!
I’m pushing the limits of my knowledge here with disassembly / low level executable details. I’ve only ever patched a few windows and android programs. Nothing like this before.
I can tell you that Ghidra detects it as x86:LE:16:Real Mode:default
It’s 5,142,358 bytes. The original system that came with this software was a pentium 1 running at 66mhz on a 630 megabyte hard drive. it seems to have dos 6.22 on it but that is almost certainly an upgrade. There are checks in the software to make sure you’re on at least dos 2 and a few checks for 286 / 386 in there. I saw the references to Phar Lap in the executable and researched them. They appear to have made the first / one of the first dos extenders so there is some sort of virtual memory thing going on here. I’m on linux, but I have the original machine, dosbox, and freedos to run any tool or check on the exe that you might want.
binwalk entropy graph https://svgshare.com/i/EXB.svg
ida segments
ida segment registers
IDA list of applied library modules
IDA strings window
IDA problems window