Package Details: bindiff 8-2

Git Clone URL: https://aur.archlinux.org/bindiff.git (read-only, click to copy)
Package Base: bindiff
Description: A comparison tool for binary files that assists vulnerability researchers and engineers to quickly find differences and similarities in disassembled code.
Upstream URL: https://www.zynamics.com/bindiff.html
Licenses: Apache-2.0
Submitter: Manouchehri
Maintainer: cyrozap
Last Packager: cyrozap
Votes: 15
Popularity: 0.003004
First Submitted: 2016-01-01 13:37 (UTC)
Last Updated: 2024-02-25 06:37 (UTC)

Dependencies (1)

Required by (0)

Sources (2)

Pinned Comments

cyrozap commented on 2023-09-27 00:18 (UTC)

Good news: BinDiff 8 has been released as open source!

Bad news: Building the GUI requires a proprietary library whose functionality is not easily replaced by any FOSS library, so it's unlikely we'll be able to build the entire BinDiff package (including the GUI) from source any time soon.

For the moment, to get the package updated ASAP, I'm going to continue to use the pre-built Debian package as the source. Once the package is updated, I'll work on updating the PKGBUILD to replace the pre-built native binaries with binaries built from source, enabling the package to be installed on architectures other than just x86_64. And then once all of that's done, if people want me to I can split the package into two: One for just the native binaries that will be built from source, and the other for just the partly-proprietary GUI JAR that will be extracted from the pre-built package.

If that all sounds good, or if you think things should be done differently, please feel free to let me know in the comments.

Latest Comments

1 2 Next › Last »

cyrozap commented on 2023-09-27 00:18 (UTC)

Good news: BinDiff 8 has been released as open source!

Bad news: Building the GUI requires a proprietary library whose functionality is not easily replaced by any FOSS library, so it's unlikely we'll be able to build the entire BinDiff package (including the GUI) from source any time soon.

For the moment, to get the package updated ASAP, I'm going to continue to use the pre-built Debian package as the source. Once the package is updated, I'll work on updating the PKGBUILD to replace the pre-built native binaries with binaries built from source, enabling the package to be installed on architectures other than just x86_64. And then once all of that's done, if people want me to I can split the package into two: One for just the native binaries that will be built from source, and the other for just the partly-proprietary GUI JAR that will be extracted from the pre-built package.

If that all sounds good, or if you think things should be done differently, please feel free to let me know in the comments.

melvyn2 commented on 2023-01-26 00:33 (UTC)

should be bindiff-bin

elichai2 commented on 2022-07-31 10:40 (UTC)

The latest version fails validation:

==> Making package: bindiff 7-3 (Sun 31 Jul 2022 01:32:24 PM IDT)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found bindiff_7_amd64.deb
  -> Found bindiff_7_amd64.deb.asc
==> Validating source files with sha256sums...
    bindiff_7_amd64.deb ... FAILED
    bindiff_7_amd64.deb.asc ... Skipped
==> ERROR: One or more files did not pass the validity check!
 -> error making: bindiff

yodaembedding commented on 2020-11-08 08:15 (UTC)

I had to import the keys via:

curl https://dl.google.com/linux/linux_signing_key.pub | gpg --import -

gardotd426 commented on 2020-04-02 18:57 (UTC)

@uzer I'd already figured out where the correct link was, but the package is still out of date. Bindiff is on version 6, so changing the version number to 6 and changing the source urls to the correct one like in your patch (and fixing the sha256sum, the pgp key doesn't need changing) is necessary to bring this package up to date.

uzer commented on 2020-04-02 17:32 (UTC)

@gardot426 My patch below addresses this problem.

-source=("https://dl.google.com/dl/zynamics/bindiff_${pkgver}_amd64.deb"{,.asc})
+source=("https://storage.googleapis.com/bindiff-releases/bindiff_${pkgver}_amd64.deb"{,.asc})

gardotd426 commented on 2020-04-02 15:03 (UTC)

This package is completely broken. The sources lead to dead links.

uzer commented on 2020-03-18 20:32 (UTC) (edited on 2020-03-18 20:33 (UTC) by uzer)

Hi. I've created a patch to update the package to version 6. Can you please merge it?


From: 
Date: Wed, 18 Mar 2020 05:54:32 -0700
Subject: [PATCH] Updated Google mirror URL and package version to 6.

---
 PKGBUILD | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/PKGBUILD b/PKGBUILD
index 5541e3d..7e2a35e 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,7 +1,7 @@
 # Maintainer: David Manouchehri <manouchehri@riseup.net>

 pkgname=bindiff
-pkgver=5
+pkgver=6
 pkgrel=1
 pkgdesc="A comparison tool for binary files that assists vulnerability researchers and engineers to quickly find differences and similarities in disassembled code."
 arch=('x86_64')
@@ -11,8 +11,8 @@ depends=('desktop-file-utils' 'java-runtime>=8')
 options=('!strip')
 install=${pkgname}.install
 backup=("etc/opt/${pkgname}"/bindiff_{core,ui}.xml)
-source=("https://dl.google.com/dl/zynamics/bindiff_${pkgver}_amd64.deb"{,.asc})
-sha256sums=('cd859562803f58331fee5f0741e081edd2a470914fa9c60ef3db6fe06f058bc4'
+source=("https://storage.googleapis.com/bindiff-releases/bindiff_${pkgver}_amd64.deb"{,.asc})
+sha256sums=('f84dacaccfeb7d2ba34cfac711457be7f3a3c963470ed7b639615f9142ffde8d'
             'SKIP')
 validpgpkeys=('EB4C1BFD4F042F6DDDCCEC917721F63BD38B4796')  # Google Inc. (Linux Packages Signing Authority)

-- 
2.25.1

Manouchehri commented on 2017-01-27 14:28 (UTC)

I'm assuming most people buy a Windows license (since it's by far the cheapest option if you run on multiple platforms; IDA works perfectly with Wine on Linux and macOS). Want me to change the post-install message?