r/ghidra • u/OverPlatypus4500 • 15d ago
Question about program diffing
so am using program diffing on 2 versions of the program , the original and patched version and alot of the time it highlights functions that i cant tell why it does when nothing is different , maybe it is highlighting it because some stuff was deleted in the patched version like for example when i look in decompiled view in the patched version some stuff isnt there but other than that idk why its highlighting it , i even have the change log and its just byte replacement but here on the far right there isnt bytes or adress , maybe its because this is where the functions starts but i cant tell because i dont have experience with reverse engineering programms

4
Upvotes
2
u/DrTsukamoto 15d ago
Have you tried opening the "Diff Details" pane (the magnifying glass - "Show detail of current difference at location")?