Skip to content

Capstone shortcoming with rdsspq

Capstone does not properly disassemble rdsspq instruction in major version 4. Prototype support is to be in version 5, but that's not available yet. From libc's vfork function on ubuntu 22:

   0x00000000000eac46 <+22>:	rdsspq rsi

This causes programs that fork to segfault when libc is zipr'd.