Skip to content

Fix XBEGIN C7 F8 decoding#376

Open
RatinCN wants to merge 1 commit into
microsoft:mainfrom
RatinCN:fix/xbegin-c7-exact-match
Open

Fix XBEGIN C7 F8 decoding#376
RatinCN wants to merge 1 commit into
microsoft:mainfrom
RatinCN:fix/xbegin-c7-exact-match

Conversation

@RatinCN
Copy link
Copy Markdown
Contributor

@RatinCN RatinCN commented May 25, 2026

Addendum to #374, already fixed in my SlimDetours in commit 65b60a7.

Only the exact C7 F8 encoding is XBEGIN. The previous C7 /7 check also treated other ModR/M forms as XBEGIN and copied them as rel16/32 targets instead of invalid or legacy C7 forms.

See also the latest Intel® 64 and IA-32 Architectures Software Developer's Manual Combined Volumes 2A, 2B, 2C, and 2D: Instruction Set Reference, A- Z:
image

Only the exact C7 F8 encoding is XBEGIN. The previous C7 /7 check also treated other ModR/M forms as XBEGIN and copied them as rel16/32 targets instead of invalid or legacy C7 forms.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant