Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
223 commits
Select commit Hold shift + click to select a range
1730d8a
Merge pull request #1544 from qilingframework/master
xwings Mar 8, 2025
ce6ffaf
QDB revamp
elicn Mar 8, 2025
f912611
Initial signal support
elicn Mar 8, 2025
cc4b1f4
Fix assertion logic
elicn Mar 9, 2025
4136fb3
Improve breakpoints handling
elicn Mar 9, 2025
5dd9cd1
Fix MIPS branch prediction bug
elicn Mar 9, 2025
6501462
Fix script quit bug
elicn Mar 9, 2025
5e1182f
Minor optimizations
elicn Mar 9, 2025
7323a32
Refactor qdb tests
elicn Mar 9, 2025
c435e3a
Improve test scripts
elicn Mar 9, 2025
c1d13e6
Add ARM static test
elicn Mar 9, 2025
74dc496
Fix open files flags
elicn Mar 11, 2025
4a34aef
Fix: gdb cannot parse some regs value when debugging ARM64 (#1526)
the-soloist Mar 18, 2025
d98f13f
Merge pull request #1546 from elicn/fix-enum
xwings Mar 19, 2025
4e3a691
Merge pull request #1545 from elicn/dev-posix-sig
xwings Mar 19, 2025
bcc182e
Use flags integer values
elicn Mar 19, 2025
d4ca103
Merge pull request #1550 from elicn/fix-flags
xwings Mar 20, 2025
f141b73
Add HeapReAlloc hook
JFarAur Mar 23, 2025
742630f
Add _realloc_base hook
JFarAur Mar 23, 2025
8101061
Add RtlPcToFileHeader hook
JFarAur Mar 23, 2025
fb8128f
Remove _initterm and _initterm_e hooks
JFarAur Mar 23, 2025
84b02ee
Remove __acrt_iob_func hook
JFarAur Mar 23, 2025
0d451f9
Cleanup
elicn Mar 26, 2025
69a6906
Add function table parsing and lookup to the PE loader
JFarAur Mar 27, 2025
1f45f9b
Adjust segment descriptors for x86_64
JFarAur Mar 27, 2025
27db58d
Add hooks for function table lookup functions in ntdll
JFarAur Mar 27, 2025
22a4b49
Make RaiseException hook passthru
JFarAur Mar 27, 2025
ce03a8a
Add ProcessCookie case for NtQueryInformationProcess hook
JFarAur Mar 28, 2025
4ac6458
Remove Encode/DecodePointer hooks
JFarAur Mar 28, 2025
54564b0
Add support for forwarded exports to the PE loader
JFarAur Mar 28, 2025
37288e6
Add user32 to DllMain blacklist
JFarAur Mar 28, 2025
52a3910
Fix some typos in ntdll hook code
JFarAur Mar 28, 2025
9661ad6
Add ZwRaiseException hook, move unhandled exception logic
JFarAur Mar 29, 2025
32e9fe3
Fix unhandled exception filter not being called correctly
JFarAur Mar 30, 2025
0ed8885
Add 64-bit msvcp140 DLLs to dllscollector script
JFarAur Mar 30, 2025
51fc085
Add abort hook
JFarAur Mar 30, 2025
273b46b
Add 32-bit msvcp140 DLLs to dllscollector script
JFarAur Mar 30, 2025
cf23ef9
Small changes in ZwRaiseException hook
JFarAur Mar 30, 2025
2b42466
Make some requested changes in ntdll hooks
JFarAur Mar 30, 2025
7dd9fcd
Add C++ runtime and exception-related tests
JFarAur Mar 30, 2025
4ea1a0a
Make requested change in GDTManager
JFarAur Mar 30, 2025
b895748
Make requested changes in PE loader
JFarAur Mar 30, 2025
bf118d2
Fixing typos
elicn Mar 30, 2025
2be8c70
Include relative branched
elicn Mar 30, 2025
74bea80
Better conform to Cmd module
elicn Mar 31, 2025
cbc2b2e
Improve default args handling
elicn Mar 31, 2025
803bd9e
Prevent running shell from a manually loaded script
elicn Mar 31, 2025
2735a9b
Minor modifications
elicn Mar 31, 2025
24f7b6d
Bump up capstone dependency
elicn Mar 31, 2025
844517d
Fix symbol lookup bug
elicn Mar 31, 2025
83da808
Enable show sub-commands
elicn Mar 31, 2025
c0daea1
Refactor hooks in ntdll
JFarAur Mar 31, 2025
8f92c73
Add source for C++ and exception-related test programs
JFarAur Mar 31, 2025
462f68a
Add note to ZwRaiseException hook
JFarAur Mar 31, 2025
0851d45
remove additional docker test
xwings Apr 1, 2025
c9d6ac8
sync branch
xwings Apr 1, 2025
5a92718
improve docker
xwings Apr 1, 2025
2ef749c
sync branch
xwings Apr 1, 2025
ed52252
keep as 3.11
xwings Apr 1, 2025
5d67393
add docker
xwings Apr 1, 2025
caff266
remove docker test
xwings Apr 1, 2025
e2559a7
remove docker test
xwings Apr 1, 2025
7786658
remove docker test
xwings Apr 1, 2025
135e713
Rename show command to info
elicn Apr 1, 2025
15e3c00
Add hook for EtwNotificationRegister
JFarAur Apr 1, 2025
92cd2d4
Fix an issue with forwarded symbols, and improve readability
JFarAur Apr 1, 2025
6adafd5
Unify heap API hooks, address debug CRT init issues
JFarAur Apr 2, 2025
a3bccf5
Fix buffer overrun issue in LCMapString implementation
JFarAur Apr 2, 2025
fe51b28
Make requested change in PE loader
JFarAur Apr 2, 2025
68aae4d
Add __dllonexit hook
JFarAur Apr 2, 2025
4bd7459
Add passthru exception-related hooks
JFarAur Apr 2, 2025
f390b47
Restore old RaiseException hook, add special case for x86
JFarAur Apr 2, 2025
1ee9ccb
Initial commit for epoll
userz Apr 4, 2025
18381f4
Simple test case
libumem Apr 4, 2025
1f12da5
Add del ql
libumem Apr 4, 2025
e208a34
Skeleton for graph
libumem Apr 4, 2025
2479b91
Flesh out tests, clean up
libumem Apr 7, 2025
f4464b9
Merge pull request #1549 from elicn/refactor-qdb
xwings Apr 12, 2025
ca0e58f
Merge branch 'qilingframework:dev' into dev
xwings Apr 13, 2025
20a7f68
sync rootfs
xwings Apr 13, 2025
93c7bc2
remove docker test
xwings Apr 13, 2025
d8dad95
ci syntax
xwings Apr 13, 2025
0cd1b2f
Merge pull request #1554 from xwings/dev
xwings Apr 13, 2025
38313de
fix docker failure
xwings Apr 13, 2025
10d3118
add in ubuntu latest
xwings Apr 13, 2025
c9d63c5
fix ubuntu version
xwings Apr 13, 2025
e13f90a
fix ubuntu version
xwings Apr 13, 2025
d425f8f
fix ubuntu version
xwings Apr 13, 2025
015b389
Merge pull request #1560 from xwings/dev
xwings Apr 13, 2025
56dd77b
disable getauxval HWCAP value for ARM64, which indicates Atomics supp…
Apr 17, 2025
f79d179
Merge branch 'qilingframework:dev' into dev
libumem Apr 22, 2025
290f116
Begin fixing this PR
libumem Apr 25, 2025
c6eee99
Add socket import back, was not supposed to be removed
libumem Apr 25, 2025
033fb4b
Address PR comments
libumem Apr 26, 2025
fd32154
Begin working on test issues
libumem Apr 26, 2025
f2861b7
Nominally working epoll server test
libumem Apr 26, 2025
f99e07a
Type annotations for args
libumem Apr 26, 2025
0022b8d
Refactor and fixes
elicn Apr 28, 2025
549673b
Merge pull request #1 from elicn/libumem-epoll-fixes
libumem Apr 28, 2025
74380b2
Address a few elicn comments, fix root for server test
libumem Apr 30, 2025
dbf2138
Turn check_epoll_depth into a prefix visitor
elicn Apr 30, 2025
96674e1
Use container semantics instead of is_present
elicn Apr 30, 2025
f108127
Fix events pointer handling
elicn Apr 30, 2025
0c96871
Fix returned events array
elicn Apr 30, 2025
bf83e9c
Cleanup and minor cosmetics
elicn Apr 30, 2025
5a87323
Tidy up tests
elicn Apr 30, 2025
d614855
Merge pull request #1552 from sakura57/dev
xwings May 6, 2025
12d3c58
Address last of feedback
libumem May 7, 2025
90df05f
Merge branch 'qilingframework:dev' into dev
libumem May 7, 2025
265406e
Merge branch 'dev' into libumem-epoll-fixes
libumem May 7, 2025
b724f4c
Merge pull request #2 from elicn/libumem-epoll-fixes
libumem May 7, 2025
e4242ca
Fix mem read issue
libumem May 8, 2025
f9497bc
Address more feedback
libumem May 9, 2025
c363dab
Tidy up coverage classes and methods
elicn May 14, 2025
be824ad
Remove drcove bb dups and speed it up
elicn May 14, 2025
104a3f3
Additional housekeeping
elicn May 14, 2025
43b8b3c
Add forgotten import
elicn May 14, 2025
70255af
Have blob loader contain an image
elicn May 14, 2025
47c3df1
Fix root for test case
libumem May 16, 2025
4d0b939
Revert "Fix root for test case"
libumem Jun 2, 2025
34fcfb5
Revert "Address more feedback"
libumem Jun 2, 2025
82de6f9
Revert "Fix mem read issue"
libumem Jun 2, 2025
5ad49c0
Revert "Revert "Fix root for test case""
libumem Jun 2, 2025
ca0d35a
Introduce packed struct
elicn Jun 3, 2025
31720cf
Refactor epoll to rely on ctypess tructure
elicn Jun 3, 2025
e0d8889
Merge pull request #3 from elicn/libumem-epoll-fixes
libumem Jun 3, 2025
92e43a3
Fix glibc issue with new test root
libumem Jun 4, 2025
fdfec5b
Attempt #1 to fix test case root
libumem Jun 17, 2025
b1ad033
Have qdb use xPSR for Cortex M instead of CPSR
elicn Jun 21, 2025
95d7b8f
Generalize code to meet both Cortex A and M
elicn Jun 21, 2025
d5b51dd
Remove dup'd comment, locally tested fix for error during ELFTest suite
libumem Jun 22, 2025
7bcb5ab
Merge pull request #1574 from elicn/fix-qdb-cortexm
xwings Jun 23, 2025
0594a52
Merge pull request #1567 from elicn/fix-blob-coverage
xwings Jun 23, 2025
aefef5f
Disable test case, for now
libumem Jun 23, 2025
58487ee
Add missing CortexM base class
elicn Jun 24, 2025
b18cc88
Merge pull request #1575 from elicn/fix-qdb-cortexm
xwings Jun 24, 2025
327f475
Decouple BLOB entry point and load address
elicn Jul 6, 2025
d2b4867
Adjust test and example
elicn Jul 6, 2025
dacc8e0
Remove redundant BLOB case
elicn Jul 6, 2025
bb21658
Fix QDB crash on allocation boundaries
elicn Jul 6, 2025
e68c923
Patch profiles to meet new required key
elicn Jul 6, 2025
7088d22
Allow tests to import relatively
elicn Jul 6, 2025
8cd866b
slight changes to readme
xwings Jul 7, 2025
6a58ccc
update readme with new wiku
xwings Jul 7, 2025
a1c3eaf
update readme with new wiki
xwings Jul 7, 2025
b10c3eb
Fix readme typo
xwings Jul 7, 2025
81b847a
Merge pull request #1578 from xwings/dev
xwings Jul 8, 2025
13e4569
Fix gdb regs reference for Cortex-M
elicn Jul 8, 2025
66f0fa3
Typo fix
elicn Jul 9, 2025
a2542f1
Typo fix
elicn Jul 9, 2025
2f604f4
Merge pull request #1577 from elicn/qdb-fixes
xwings Jul 10, 2025
d3cc47d
adding support for raw binary blobs
technikelly Aug 12, 2025
46866ad
Redesign MMIO support to be pickle-friendly
elicn Aug 15, 2025
c23928a
Cosmetics
elicn Aug 15, 2025
7b98c01
Make MCU loader less noisy
elicn Aug 15, 2025
81c2a39
minimizing blob changes
technikelly Aug 20, 2025
6d697b5
updating copyright statements with license info
technikelly Aug 20, 2025
a2223ab
update description
technikelly Aug 20, 2025
313b907
return EISDIR in case ql_file object has a directory path and a read …
rliebig Aug 23, 2025
5ec4a3b
addressing review comments, removing copyright notices
technikelly Aug 25, 2025
04236d7
enabling test and updating rootfs submodule
technikelly Aug 27, 2025
d81051c
Merge pull request #1584 from elicn/dev-mmio-cbs
xwings Sep 5, 2025
a82abfd
Merge pull request #1583 from technikelly/feature_raw_bin_blob
xwings Sep 5, 2025
f45eb70
Cache Struct instances for faster conversions
elicn Oct 10, 2025
59ebfdd
Cache memory accessors for faster access
elicn Oct 10, 2025
94aeb96
Use disasm_lite for faster DISASM output
elicn Oct 10, 2025
d846c75
Add a CC accessor to tell the return address
elicn Oct 10, 2025
a845b5e
Avoid using mutable object as default parameter value
elicn Oct 10, 2025
e14ccf1
Enable passthrough on dxeapi
elicn Oct 10, 2025
18d812e
Add SimpleText protocols to UEFI
elicn Oct 10, 2025
0af477c
Fix the way input btyes are passed on AFL crash validation
elicn Oct 10, 2025
6b136dd
Annotate QlDisk methods
elicn Oct 10, 2025
7531c33
Misc DOS additions
elicn Oct 10, 2025
0d9c722
Misc Linux kernel API additions
elicn Oct 10, 2025
b0d6384
Misc examples fixes
elicn Oct 10, 2025
44087e1
Add missing import
elicn Oct 10, 2025
a8edbe1
Support IDA 9.x
juliangrtz Oct 13, 2025
bfbc1c8
Implement backwards compatibility for IDA 7–8
juliangrtz Oct 14, 2025
2a4bf75
Separate IDA class into IDABase, IDA7 and IDA9
juliangrtz Oct 15, 2025
147ec7c
Make Windows compatible to latest image
elicn Oct 29, 2025
f309c87
Merge pull request #1595 from elicn/dev-adjust-win
xwings Oct 30, 2025
c5d7a85
Add rseq syscall dummy implementation
elicn Oct 30, 2025
c2efb24
Merge pull request #1586 from rliebig/dev-liebig-syscall-read-eisdir
xwings Oct 30, 2025
81d643f
Merge pull request #1590 from elicn/dev
xwings Oct 30, 2025
bbf8d7a
Merge pull request #1591 from juliangrtz/dev
xwings Oct 30, 2025
45d87c5
Consolidate mmio bookeeping with ram
elicn Oct 31, 2025
b6f085c
Minor bug fix in change_mapinfo
elicn Oct 31, 2025
29c552e
add ppc xml basic target , add a no yield coverage
Nov 4, 2025
8d52304
Merge remote-tracking branch 'origin/dev'
Nov 4, 2025
4810ad7
ppc xml fix
0xMirasio Nov 4, 2025
08650be
remove hashable drcov bb_entries
0xMirasio Nov 5, 2025
83c6fb9
Merge pull request #1596 from elicn/mmio-unmap-fix
xwings Nov 5, 2025
fe462b8
Merge pull request #1600 from 0xMirasio/master
xwings Nov 5, 2025
2ecd1d9
Merge branch 'qilingframework:dev' into dev
libumem Nov 13, 2025
a76b858
Tentative fix for epoll server test case
libumem Nov 14, 2025
4448d4c
Remove stray PDB invocation
libumem Nov 15, 2025
3675f55
Address @elicn feedback
libumem Nov 16, 2025
30eba37
Add TODO.md, ARCHITECTURE.md. Update README.md. and add kernel proxy
Apr 11, 2026
dbc939b
Merge pull request #1558 from libumem/dev
xwings Apr 11, 2026
5ed49e7
Merge branch 'qilingframework:dev' into dev
xwings Apr 11, 2026
b60d402
Fix docker.yaml
Apr 12, 2026
2f16ccc
Fix docker.yaml and sync
Apr 12, 2026
cb875f8
more qiling style. update logging and exception
Apr 12, 2026
486369d
better New SYSCALL_EX IPC message, FD arg type and Forwarder closure
Apr 27, 2026
d87967e
Merge pull request #1610 from xwings/dev
xwings Apr 27, 2026
22947e0
ignore files
Apr 28, 2026
b4d9238
Merge pull request #1613 from xwings/dev
xwings Apr 28, 2026
104830d
fix docker python:3-slim
Apr 28, 2026
8cb2a6b
Merge pull request #1614 from xwings/docker-fix
xwings Apr 28, 2026
0d17d14
fix docker python:3-slim and dropped --no-deps
Apr 28, 2026
7b73f59
Merge pull request #1615 from xwings/docker-fix
xwings Apr 28, 2026
47c8a92
Bump test to 3.11 and 3.13
Apr 28, 2026
b9eafe8
Merge branch 'dev' into python-3.13
xwings Apr 28, 2026
22d109d
Fix windows collector
Apr 28, 2026
a6631f4
Merge pull request #1617 from xwings/python-3.13
xwings Apr 28, 2026
3a8d371
Fix MCU wait
Apr 28, 2026
f788e76
Merge pull request #1618 from xwings/python-3.13
xwings Apr 28, 2026
ef898e6
Version 1.4.8
Apr 28, 2026
483916e
Merge pull request #1620 from xwings/dev
xwings Apr 28, 2026
d18027e
update rootfs branch
Apr 28, 2026
f77b4c5
Merge pull request #1621 from xwings/dev
xwings Apr 28, 2026
b6ced6f
update rootfs branch
Apr 28, 2026
2eba2cd
Merge pull request #1622 from xwings/dev
xwings Apr 28, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 8 additions & 9 deletions .github/workflows/build-ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,11 +10,11 @@ jobs:
fail-fast: false
matrix:
#os: [windows-2019, macos-10.15, ubuntu-18.04, ubuntu-20.04]
os: [windows-latest, ubuntu-22.04]
python-version: ["3.9", "3.11"]
os: [windows-latest, ubuntu-latest]
python-version: ["3.11", "3.13"]
include:
- os: ubuntu-22.04
python-version: 3.9
- os: ubuntu-latest
python-version: "3.13"
container: Docker

steps:
Expand Down Expand Up @@ -72,13 +72,12 @@ jobs:
cd ../qiling
cd ../examples/rootfs/x86_linux/kernel && unzip -P infected m0hamed_rootkit.ko.zip
cd ../../../../
pip3 install -e .[RE]

if [ ${{ matrix.os }} == 'ubuntu-18.04' ] and [ ${{ matrix.python-version }} == '3.9' ]; then
pip3 install -e .
pip3 install poetry
if [ ${{ matrix.contrainer }} != "" ]; then
docker run -it --rm -v ${GITHUB_WORKSPACE}:/qiling qilingframework/qiling:dev bash -c "cd tests && ./test_onlinux.sh"
else
pip3 install poetry
cd tests && ./test_onlinux.sh
cd tests && ./test_onlinux.sh
fi

# - name: mac run tests
Expand Down
6 changes: 6 additions & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -70,3 +70,9 @@ poetry.toml

# LSP config files
pyrightconfig.json

# AI
CLAUDE.md
.claude
.codex
.AGENT.md
427 changes: 427 additions & 0 deletions ARCHITECTURE.md

Large diffs are not rendered by default.

6 changes: 3 additions & 3 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM python:3-slim AS base
FROM python:3.13-slim-trixie AS base

WORKDIR /qiling

Expand All @@ -12,7 +12,7 @@ RUN apt-get update && apt-get -y upgrade && rm -rf /var/lib/apt/lists/*
FROM base AS builder

RUN apt-get update && apt-get install -y --no-install-recommends \
cmake build-essential gcc git \
cmake build-essential gcc git pkg-config \
&& rm -rf /var/lib/apt/lists/*

COPY pyproject.toml poetry.lock ./
Expand All @@ -33,7 +33,7 @@ WORKDIR /qiling
RUN apt-get update \
&& apt-get install -y --no-install-recommends unzip apt-utils \
&& rm -rf /var/lib/apt/lists/* \
&& pip3 install --no-deps --no-cache-dir dist/*.whl \
&& pip3 install --no-cache-dir dist/*.whl \
&& rm -rf ./dist/

CMD ["bash"]
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -114,7 +114,7 @@ However, Qiling offers some important differences against QEMU user mode:

#### Installation

Please see [setup guide](https://docs.qiling.io/en/latest/install/) file for how to install Qiling Framework.
Please see [setup guide](https://github.com/qilingframework/qiling/wiki/Installation) file for how to install Qiling Framework.

---

Expand Down
1 change: 0 additions & 1 deletion TODO

This file was deleted.

Loading
Loading