Unable to recognize ABI for void functions in IDA

[icecr4ck]

Hello,

It seems Sibyl (the IDA stub) is unable to recognize the ABI when it finds void functions in IDA.

I believe this issue could be resolved in modifying the gtype_matcher regex as the latter tries to match the keyword before the function arguments.

# int __cdecl(int, int) -> __cdecl
gtype_matcher = re.compile(".+ ([^\(]+)\([^\)]*\)")

Maybe this issue could occur with another keywords. As a reminder, the IDA functions types are defined here: https://www.hex-rays.com/products/ida/support/idadoc/1361.shtml

[commial]

Hi,

Thanks for reporting it. I've not been able to reproduce your bug, can you paste here the result of "idc.GuessType(FAULTY_FUNC_ADDR)"?
On a void function, I obtain (for instance): void __thiscall(...) which is correctly matched and parsed.

Thanks in advance

[icecr4ck]

No problem, here is what I get for the faulty function.

void __stdcall __noreturn(LPVOID lpThreadParameter)