Capstone

Version 5.0

Wed, 05 Jul 2023 00:00:00 +0000

We are very happy to announce version 5.0 of Capstone disassembler framework!

This release fixes a lot of bugs and adds few new architectures. We strongly encourage all users of v4 to upgrade.

We wish to express our sincere gratitude to all contributors & donators, who generously supported us to maintain Capstone!

The source code is available in zip & tar.gz formats, or at tag-name 5.0 in our Github repo.

We are planning for the next major release, version 6.0. Stay tuned for updates!

5.0

Wed, 05 Jul 2023 00:00:00 +0000

Release 5.0 is a stable release version, with detailed changelog at https://github.com/capstone-engine/capstone/releases/tag/5.0

Version 4.0.2

Fri, 08 May 2020 00:00:00 +0000

We are very happy to announce version 4.0.2 of Capstone disassembler framework!

This release fixes some bugs of v4.0.1, as well as introduces some improvements for several bindings. We strongly encourage all users of v4.0.1 to upgrade.

In no particular order, we would like to thank Xipiter and Catena Cyber for sponsoring this release!

We also wish to express our sincere gratitude to all contributors & donators, who generously supported us to maintain Capstone!

The source code is available in zip & tar.gz formats, or at tag-name 4.0.2 in our Github repo.

Find pre-compiled binaries in the Download section.

See here for summary of the important changes of this version.

4.0.2

Fri, 08 May 2020 00:00:00 +0000

Release 4.0.2 is a stable release version, with minor bugfixes in the core & some bindings.

Core

Windows kernel-mode driver support
Fix installation path on FreeBSD and DragonFly

Cstool

Add armv8, ppc32 & thumbv8 modes
Print instruction ID

X86

Support CS_OPT_UNSIGNED for ATT syntax
Fix operand size for some instructions
Fix LOCK prefixes
Recognize xacquire/xrelease prefix
Fix call/jmp access mode of mem operand
Add ENDBR32, ENDBR64 to reduce mode
Other minor fixes

Arm

Update writeback for STR_POST_REG

ARM64

Support CS_OPT_UNSIGNED
Fix register access flags for memory instructions
Fix UMOV vess

M68K

Store correct register value in op.reg_pair

PowerPC

BDZLA is absolute branch

SystemZ

Fix truncated 64bit imm operand
Fix base/index printing

Python binding

Fix skipdata struct being destroyed
Add repr for capstone.CsInsn

Java binding

Fix Java bindings to use pointers instead of longs

Ocaml binding

Fix x86_op record

Version 4.0.1

Thu, 10 Jan 2019 00:00:00 +0000

We are very happy to announce version 4.0.1 of Capstone disassembler framework!

This release fixes some minor bugs of v4.0, as well as introduces some improvements for Python binding. We encourage all users of v4.0 to upgrade.

In no particular order, we would like to thank NowSecure, Verichains & Vsec for sponsoring this release!

We also wish to express our sincere gratitude to all contributors & donators, who generously supported us to maintain Capstone!

The source code is available in zip & tar.gz formats, or at tag-name 4.0.1 in our Github repo.

Find pre-compiled binaries in the Download section.

See here for summary of the important changes of this version.

4.0.1

Thu, 10 Jan 2019 00:00:00 +0000

Release 4.0.1 is a stable release version, with minor bugfixes in the core & Python binding.

Core

Fix some issues for packaging (Debian, Gentoo, etc).
Better support for building with Mingw.
cstool has new option -s to turn on skipdata mode.
cstool -v now report build settings of the core.
Add suite/capstone_get_setup.c so users can integrate with their own code to retrieve Capstone settings at build time.

Arm

Fix 4.0 regression: the tbh [r0, r1, lsl #1] instruction sets the operand.shift.value back again.
Remove ARM_REG_PC group for BX instruction.

X86

endbr32 and endbr64 instructions are now properly decoded in both CS_MODE_32 and CS_MODE_64.

M680X

Fix some issues reported by clang-analyzer.

Python binding

Fix skipdata setup.
Add getter/setter for skipdata_mnem & skipdata_callback.

Version 4.0

Tue, 18 Dec 2018 00:00:00 +0000

We are super excited to announce version 4.0 of Capstone disassembler framework!

Exactly 5 years ago, on December 18th of 2013, we published our first version. Today, this release 4.0 marks 5 years of the project! Such a long journey, which is impossible without huge community support!

In no particular order, we would like to thank Thinkst Canary, NowSecure, ECQ, Senrio, GracefulBits & Catena Cyber for sponsoring this release!

We also wish to express our sincere gratitude to all contributors & donators, who generously supported us to maintain Capstone!

This version improves a lot of things over v3.0.5. The source code is available in zip & tar.gz formats, or at tag-name 4.0 in our Github repo.

Find pre-compiled binaries in the Download section.

See here for summary of the important changes of this version.

4.0

Tue, 18 Dec 2018 00:00:00 +0000

Release 4.0 is a stable release version, with important fixes in the core & several bindings against v3.0.5.

Core

New APIs: cs_regs_access()
Add new options for cs_option(): CS_OPT_MNEMONIC & CS_OPT_UNSIGNED & CS_OPT_SYNTAX_MASM.
Various updates & bugfixes for all architectures.
Add 4 new architectures: EVM, M68K, M680X & TMS320C64x.
Add new group types: CS_GRP_PRIVILEGE & CS_GRP_BRANCH_RELATIVE.
Add new error types: CS_ERR_X86_MASM.

X86

Add XOP code condition type in x86_xop_cc.
Add some info on encoding to cs_x86 in cs_x86_encoding.
Add register flags update in cs_x86.{eflags, fpu_flags}
Change cs_x86.disp type from int32_t to int64_t.
Add new groups: X86_GRP_VM & X86_GRP_FPU.
Lots of new instructions (AVX)

Arm64

Add instruction ARM64_INS_NEGS & ARM64_INS_NGCS.

Mips

Add mode CS_MODE_MIPS2.

PowerPC

Change cs_ppc_op.imm type from int32_t to int64_t.
Add new groups: PPC_GRP_ICBT, PPC_GRP_P8ALTIVEC, PPC_GRP_P8VECTOR & PPC_GRP_QPX.
Lots of new instructions (QPX among them)

Sparc

Change cs_sparc_op.imm type from int32_t to int64_t.

Bindings

New bindings: PowerShell & VB6

Version 3.0.5

Wed, 18 Jul 2018 00:00:00 +0000

We are very happy to announce version 3.0.5 of Capstone disassembler framework!

In no particular order, we would like to thank CrowdStrike, CMC Infosec & Jurriaan Bremer for sponsoring this version!

We also wish to express our sincere gratitude to all project contributors & donators, who generously supported us to maintain Capstone project!

This version fixes some important security issues of v3.0.4, as well as many improvements in the core & bindings. The source code is available in zip & tar.gz formats, or at tag-name 3.0.5 in our Github repo.

Find pre-compiled binaries in the Download section.

See here for summary of the important changes of this version 3.0.5.

3.0.5

Wed, 18 Jul 2018 00:00:00 +0000

Release 3.0.5 is a stable release version, with important fixes in the core & several bindings against v3.0.5-rc3.

Library

Fix the include path for Android builds when building cstool.
Add posibility to disable universal build for Mac OS.
cstool: Separate instruction bytes by spaces.
Fix code path of pkg-config in Cmake.
Update XCode project for XCode 9.1.
Add Cortex-M support to cstool.
Cmake forces to be build using MT with MSVC.
Better support for Mac OS kernel.

X86

Fix some issues in handling EVEX & VEX3 instructions.
Fix immediate operand for AND instruction in ATT mode.
Fix ATT syntax when imm operand is 0.
Better handle XACQUIRE/XRELEASE.
Fix imm operand of RETF.

Arm

Fix an integer overlow bug.

Arm64

Bug fix for incorrect operand type in certain load/store instructions.

Mips

Mode CS_MODE_MIPS32R6 automatically sets CS_MODE_32

PowerPC

Fix endian check.

Sparc

Fix an integer overlow bug.

SystemZ

Fix an integer overlow bug.

Python binding

Raise error on accessing irrelevant data fields if skipdata & detail modes are enable.