IDA 6.3

IDA: What's new in 6.3

Highlights

  • Experimental source-level debuggingCurrent implementation requires PDB files with source line number info (Windows-only). Other debugging formats to be added in the future. Source file breakpoints are possible. Also implemented in the decompiler - you can now step through the decompiled text. Local and global variables are displayed. Hooks for providing lines info and source files are available in the SDK, but API can change in future.

  • Trace Replayer Record execution traces, save, load and compare them. Tracing can be enabled and disabled in breakpoint actions. Replay the recording, step forward and backwards. Show executed blocks and functions in IDA's graph view and proximity view. See our blog for more details.

  • Page-level breakpoints Arbitrarily-sized memory breakpoints implemented using page permissions.\

    Can break on writes, reads and execution.\

    Currently available in the Win32, Bochs, and WinDbg debugger backends.

  • User interface Updated Qt libraries to version 4.8.1 Full-screen mode. Default hotkey is F11 on Windows and Linux and Cmd-Shift-F on OS X. Full support for Numpad keys in shortcuts.

  • FLIRT signatures Many improvements in file parsers and sigmake. Support for 64-byte long patterns (increased from 32 bytes). Improved resolving and reporting of collisions in sigmake. Visual C++ signatures regenerated from scratch; you should see a lot less "unknown_libname" in the listings. Improvements in pelf parser:

    • added option for generating one pattern per function instead of per code section

    • ELF64 support\

    • record and honor Thumb bit for ARM files

  • .NET file loader

    Works in Linux, OS X. Implemented loading of .NET files from scratch, without relying on .NET or Mono libraries. Fixed several bugs in the process.

  • Processor modules new: M16C from Renesas (formerly Hitachi). new: unSP from SunPlus. new: TMS320C1 from Texas Instruments (contributed by Jeremy Cooper). new: Philips XA51 (contributed by Petr Novak). MIPS: Toshiba TX19a extensions and MIPS-MT, MIPS-3D, smartMIPS instructions. PPC: support for paired single (Gekko) and VMX128 (Xbox360 Xenon) instructions. PPC: added support for chip-specific SPRs, DPRs and memory-mapped registers.

  • IDAPython Switched to Python 2.7 on Windows and Linux. Bundle prebuilt Python with Linux installer and offer to use it on x64 distros: this should resolve most of the IDAPython issues under that OS.\

    More APIs wrapped. Added missing IDC functions to idc.py

Changelist

Processor Modules

  • + 8051: added register definitions for 8032 variants

  • + ARM: added recognition of R7 as the frame pointer in the thumb mode

  • + AVR: added I/O port definitions for ATtiny2313 and ATtiny2313a (courtesy of Marcel Kilgus)

  • + AVR: print immediate operands as unsigned by default (except for subi/sbci)