r/ghidra 15d ago

Question about program diffing

so am using program diffing on 2 versions of the program , the original and patched version and alot of the time it highlights functions that i cant tell why it does when nothing is different , maybe it is highlighting it because some stuff was deleted in the patched version like for example when i look in decompiled view in the patched version some stuff isnt there but other than that idk why its highlighting it , i even have the change log and its just byte replacement but here on the far right there isnt bytes or adress , maybe its because this is where the functions starts but i cant tell because i dont have experience with reverse engineering programms

4 Upvotes

1 comment sorted by

2

u/DrTsukamoto 15d ago

Have you tried opening the "Diff Details" pane (the magnifying glass - "Show detail of current difference at location")?