rizin/librz/arch/analysis.c
2026-07-02 11:11:28 +08:00

1408 lines
41 KiB
C

// SPDX-FileCopyrightText: 2009-2020 pancake <pancake@nopcode.org>
// SPDX-FileCopyrightText: 2009-2020 nibble <nibble.ds@gmail.com>
// SPDX-License-Identifier: LGPL-3.0-only
#include "analysis_private.h"
/**
* \brief Returns the default size byte width of memory access operations.
* The size is just a best guess.
*
* \param analysis The current RzAnalysis in use.
*
* \return The default width of a memory access in bytes.
*/
RZ_API ut32 rz_analysis_guessed_mem_access_width(RZ_NONNULL const RzAnalysis *analysis) {
if (analysis->bits == 16 && RZ_STR_EQ(analysis->cur->arch, "arm")) {
// Thumb access is usually 4 bytes of memory by default.
return 4;
}
// Best guess for variable size.
return analysis->bits / 8;
}
RZ_API void rz_analysis_set_limits(RZ_NONNULL RzAnalysis *analysis, ut64 from, ut64 to) {
rz_return_if_fail(analysis);
analysis->limit.addr = from;
analysis->limit.size = to - from;
}
RZ_API void rz_analysis_get_limits(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE ut64 *from, RZ_NULLABLE ut64 *to) {
rz_return_if_fail(analysis);
if (from) {
*from = rz_itv_begin(analysis->limit);
}
if (to) {
*to = rz_itv_end(analysis->limit);
}
}
RZ_API bool rz_analysis_is_within_limits(RZ_NONNULL RzAnalysis *analysis, ut64 addr) {
rz_return_val_if_fail(analysis, false);
if (rz_itv_size(analysis->limit) < 1) {
return false;
}
return rz_itv_contain(analysis->limit, addr);
}
RZ_API bool rz_analysis_is_beyond_limits(RZ_NONNULL RzAnalysis *analysis, ut64 addr) {
rz_return_val_if_fail(analysis, false);
if (rz_itv_size(analysis->limit) < 1) {
return false;
}
return !rz_itv_contain(analysis->limit, addr);
}
RZ_API bool rz_analysis_has_valid_limits(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, false);
return rz_itv_size(analysis->limit) > 0;
}
static void meta_unset_for(RzEvent *ev, int type, void *user, void *data) {
RzSpaces *s = (RzSpaces *)ev->user;
RzAnalysis *analysis = container_of(s, RzAnalysis, meta_spaces);
RzSpaceEvent *se = (RzSpaceEvent *)data;
rz_meta_space_unset_for(analysis, se->data.unset.space);
}
static void meta_count_for(RzEvent *ev, int type, void *user, void *data) {
RzSpaces *s = (RzSpaces *)ev->user;
RzAnalysis *analysis = container_of(s, RzAnalysis, meta_spaces);
RzSpaceEvent *se = (RzSpaceEvent *)data;
se->res = rz_meta_space_count_for(analysis, se->data.count.space);
}
void rz_analysis_hint_storage_init(RzAnalysis *a);
void rz_analysis_hint_storage_fini(RzAnalysis *a);
static void meta_item_free(void *item) {
if (!item) {
return;
}
RzAnalysisMetaItem *it = item;
free(it->str);
free(it);
}
RZ_API RzAnalysis *rz_analysis_new(RZ_NULLABLE const char *sdb_types_path) {
RzAnalysis *analysis = RZ_NEW0(RzAnalysis);
if (!analysis) {
return NULL;
}
if (!sdb_types_path) {
RzPath *path = rz_path_new();
if (!path) {
rz_path_free(path);
free(analysis);
return NULL;
}
analysis->sdb_types_path = rz_path_system(path, RZ_SDB_TYPES);
rz_path_free(path);
if (!analysis->sdb_types_path) {
free(analysis);
return NULL;
}
} else {
analysis->sdb_types_path = rz_str_dup(sdb_types_path);
}
if (!rz_str_constpool_init(&analysis->constpool)) {
free(analysis->sdb_types_path);
free(analysis);
return NULL;
}
analysis->bb_tree = NULL;
analysis->ht_addr_fun = ht_up_new(NULL, NULL);
analysis->ht_name_fun = ht_sp_new(HT_STR_DUP, NULL, NULL);
analysis->os = rz_str_dup(RZ_SYS_OS);
analysis->opt.nopskip = true; // skip nops in code analysis
analysis->opt.hpskip = false; // skip `mov reg,reg` and `lea reg,[reg]`
analysis->gp = 0LL;
analysis->sdb = sdb_new0();
analysis->cpp_abi = RZ_ANALYSIS_CPP_ABI_ITANIUM;
analysis->opt.depth = 32;
analysis->opt.noncode = false; // do not analyze data by default
analysis->opt.bb_max_size = RZ_ANALYSIS_BLOCK_MAX_SIZE;
analysis->opt.fcn_max_size = 256 * 1024;
rz_spaces_init(&analysis->meta_spaces, "CS");
rz_event_hook(analysis->meta_spaces.event, RZ_SPACE_EVENT_UNSET, meta_unset_for, NULL);
rz_event_hook(analysis->meta_spaces.event, RZ_SPACE_EVENT_COUNT, meta_count_for, NULL);
rz_analysis_hint_storage_init(analysis);
rz_interval_tree_init(&analysis->meta, meta_item_free);
rz_analysis_unset_limits(analysis);
analysis->typedb = rz_type_db_new();
analysis->sdb_fmts = sdb_ns(analysis->sdb, "spec", 1);
analysis->sdb_cc = sdb_ns(analysis->sdb, "cc", 1);
analysis->sdb_classes = sdb_ns(analysis->sdb, "classes", 1);
analysis->sdb_classes_attrs = sdb_ns(analysis->sdb_classes, "attrs", 1);
analysis->sdb_noret = sdb_ns(analysis->sdb, "noreturn", 1);
(void)rz_analysis_xrefs_init(analysis);
analysis->syscall = rz_syscall_new();
analysis->arch_target = rz_platform_target_new();
analysis->platform_target = rz_platform_target_index_new();
rz_io_bind_init(analysis->iob);
rz_flag_bind_init(analysis->flb);
analysis->reg = rz_reg_new();
analysis->last_disasm_reg = NULL;
analysis->lineswidth = 0;
analysis->fcns = rz_list_newf(rz_analysis_function_free);
analysis->leaddrs = NULL;
analysis->imports = rz_list_newf(free);
rz_analysis_set_bits(analysis, 32);
analysis->plugins = ht_sp_new(HT_STR_DUP, NULL, NULL);
if (analysis->plugins) {
const size_t n_plugins = rz_arch_get_n_plugins();
for (size_t i = 0; i < n_plugins; i++) {
RzAnalysisPlugin *plugin = rz_arch_get_analysis_plugin(i);
if (!plugin) {
continue;
}
rz_analysis_plugin_add(analysis, plugin);
}
}
analysis->ht_global_var = ht_sp_new(HT_STR_DUP, NULL, (HtSPFreeValue)rz_analysis_var_global_free);
analysis->ht_gadget_semantics = NULL;
analysis->gadget_cache[0] = NULL;
analysis->gadget_cache[1] = NULL;
analysis->gadget_cache[2] = NULL;
analysis->global_var_tree = NULL;
analysis->il_vm = NULL;
analysis->hash = rz_hash_new();
analysis->debug_info = rz_analysis_debug_info_new();
analysis->cmpval = UT64_MAX;
analysis->lea_jmptbl_ip = UT64_MAX;
analysis->gnu_thumb1_case_uqi_addr = 0;
analysis->ht_virtual_xrefs = ht_sp_new(HT_STR_DUP, NULL, (HtSPFreeValue)rz_set_u_free);
return analysis;
}
RZ_API void plugin_fini(RzAnalysis *analysis) {
RzAnalysisPlugin *p = analysis->cur;
if (p && p->fini && !p->fini(analysis->plugin_data)) {
RZ_LOG_ERROR("analysis plugin '%s' failed to terminate.\n", p->name);
}
analysis->plugin_data = NULL;
}
static void gadget_cache_free(RzGadgetCache *gadget_cache) {
if (!gadget_cache) {
return;
}
rz_rbtree_free(gadget_cache->tree, gadget_cache->free, NULL);
free(gadget_cache);
}
void __block_free_rb(RBNode *node, void *user);
RZ_API void rz_analysis_free(RZ_NULLABLE RzAnalysis *a) {
if (!a) {
return;
}
plugin_fini(a);
rz_hash_free(a->hash);
rz_analysis_il_vm_cleanup(a);
rz_list_free(a->fcns);
ht_up_free(a->ht_addr_fun);
ht_sp_free(a->ht_name_fun);
rz_set_u_free(a->visited);
rz_analysis_hint_storage_fini(a);
rz_interval_tree_fini(&a->meta);
free(a->cpu);
free(a->os);
rz_rbtree_free(a->bb_tree, __block_free_rb, NULL);
rz_spaces_fini(&a->meta_spaces);
rz_syscall_free(a->syscall);
rz_platform_target_free(a->arch_target);
rz_platform_target_index_free(a->platform_target);
rz_reg_free(a->reg);
ht_up_free(a->ht_xrefs_from);
ht_up_free(a->ht_xrefs_to);
rz_list_free(a->leaddrs);
rz_type_db_free(a->typedb);
sdb_free(a->sdb);
rz_analysis_esil_free(a->esil);
free(a->last_disasm_reg);
rz_list_free(a->imports);
rz_str_constpool_fini(&a->constpool);
ht_sp_free(a->ht_global_var);
ht_up_free(a->ht_gadget_semantics);
for (int i = 0; i < 3; i++) {
gadget_cache_free(a->gadget_cache[i]);
}
ht_sp_free(a->plugins);
rz_analysis_debug_info_free(a->debug_info);
ht_sp_free(a->ht_virtual_xrefs);
free(a->sdb_types_path);
free(a);
}
RZ_DEPRECATE RZ_API bool rz_analysis_plugin_support_esil(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, false);
if (!analysis->cur) {
return false;
}
return analysis->cur->esil;
}
RZ_DEPRECATE RZ_API bool rz_analysis_plugin_is_arch(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL const char *arch) {
rz_return_val_if_fail(analysis && RZ_STR_ISNOTEMPTY(arch), false);
if (!analysis->cur) {
return false;
}
return RZ_STR_EQ(analysis->cur->arch, arch);
}
RZ_API const RzAnalysisPlugin *rz_analysis_plugin_current(RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->cur;
}
RZ_API RZ_OWN RzIterator *rz_analysis_plugin_iterator(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return ht_sp_as_iter(analysis->plugins);
}
RZ_API bool rz_analysis_plugin_add(RzAnalysis *analysis, RZ_NONNULL RzAnalysisPlugin *p) {
rz_return_val_if_fail(analysis && p, false);
if (!ht_sp_insert(analysis->plugins, p->name, p)) {
RZ_LOG_WARN("Plugin '%s' was already added.\n", p->name);
}
return true;
}
RZ_API bool rz_analysis_plugin_del(RzAnalysis *analysis, RZ_NONNULL RzAnalysisPlugin *p) {
rz_return_val_if_fail(analysis && p, false);
if (analysis->cur == p) {
plugin_fini(analysis);
analysis->cur = NULL;
}
return ht_sp_delete(analysis->plugins, p->name);
}
RZ_API RZ_BORROW HtSP /*<RzAnalysisPlugin *>*/ *rz_analysis_get_plugins(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->plugins;
}
RZ_API bool rz_analysis_use(RzAnalysis *analysis, const char *name) {
rz_return_val_if_fail(analysis && name, false);
if (analysis->cur && !strcmp(analysis->cur->name, name)) {
return true;
}
RzIterator *it = ht_sp_as_iter(analysis->plugins);
RzAnalysisPlugin **val;
rz_iterator_foreach(it, val) {
RzAnalysisPlugin *h = *val;
if (!h || !h->name || strcmp(h->name, name)) {
continue;
}
plugin_fini(analysis);
analysis->cur = h;
// always set the cpu as the name of the arch.
rz_analysis_set_cpu(analysis, name);
if (h->init && !h->init(&analysis->plugin_data)) {
RZ_LOG_ERROR("analysis plugin '%s' failed to initialize.\n", h->name);
rz_iterator_free(it);
return false;
}
rz_analysis_set_reg_profile(analysis);
if (analysis->il_vm) {
rz_analysis_il_vm_setup(analysis);
}
rz_iterator_free(it);
return true;
}
rz_iterator_free(it);
return false;
}
/**
* \brief Check if a register is in the analysis profile.
* \param analysis Pointer to the RzAnalysis object.
* \param name The register name to check.
* \return true if the register name is found, false otherwise.
*
* This function checks if the given register name is present
* in the register profile of the given RzAnalysis.
*/
RZ_API bool rz_analysis_is_reg_in_profile(RZ_NONNULL RzAnalysis *analysis, RZ_NONNULL const char *name) {
rz_return_val_if_fail(analysis && name, false);
char *reg_prof = rz_analysis_get_reg_profile(analysis);
if (!reg_prof) {
return false;
}
if (strstr(reg_prof, name)) {
free(reg_prof);
return true;
}
free(reg_prof);
return false;
}
RZ_API bool rz_analysis_set_reg_profile(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, false);
char *p = rz_analysis_get_reg_profile(analysis);
if (!p) {
return false;
}
rz_reg_set_profile_string(analysis->reg, p);
free(p);
return true;
}
RZ_API RZ_OWN char *rz_analysis_get_reg_profile(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, false);
RzAnalysisPlugin *cur = analysis->cur;
if (cur && cur->get_reg_profile) {
return cur->get_reg_profile(analysis);
}
return NULL;
}
RZ_API void rz_analysis_set_gnu_thumb1_case_uqi_addr(RZ_NONNULL RzAnalysis *analysis, ut64 addr) {
rz_return_if_fail(analysis);
analysis->gnu_thumb1_case_uqi_addr = addr;
}
RZ_API ut64 rz_analysis_get_gnu_thumb1_case_uqi_addr(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, UT64_MAX);
return analysis->gnu_thumb1_case_uqi_addr;
}
RZ_API void rz_analysis_set_pc_align(RZ_NONNULL RzAnalysis *a, ut32 pc_align) {
rz_return_if_fail(a);
if (pc_align < 2) {
pc_align = 1;
}
a->pcalign = pc_align;
}
RZ_API ut32 rz_analysis_get_pc_align(RZ_NONNULL RzAnalysis *a) {
rz_return_val_if_fail(a, 1);
if (a->pcalign < 2) {
return 1;
}
return a->pcalign;
}
RZ_API RZ_BORROW RzIOBind *rz_analysis_get_io_bind(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return &analysis->iob;
}
RZ_API RZ_BORROW RzCoreBind *rz_analysis_get_core_bind(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return &analysis->coreb;
}
RZ_API RZ_BORROW RzFlagBind *rz_analysis_get_flag_bind(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return &analysis->flb;
}
RZ_API RZ_BORROW RzBinBind *rz_analysis_get_bin_bind(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return &analysis->binb;
}
RZ_API RZ_BORROW RzTypeDB *rz_analysis_get_type_db(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->typedb;
}
RZ_API RZ_BORROW RzReg *rz_analysis_get_reg(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->reg;
}
RZ_API RZ_BORROW Sdb *rz_analysis_get_sdb_formats(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->sdb_fmts;
}
RZ_API RZ_BORROW Sdb *rz_analysis_get_sdb_cc(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->sdb_cc;
}
RZ_API RZ_BORROW Sdb *rz_analysis_get_sdb_root(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->sdb;
}
RZ_API RZ_BORROW RzPlatformTarget *rz_analysis_get_arch_target(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->arch_target;
}
RZ_API RZ_BORROW RzPlatformTargetIndex *rz_analysis_get_platform_target(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->platform_target;
}
RZ_API RZ_BORROW RBTree *rz_analysis_get_global_var_tree(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return &analysis->global_var_tree;
}
RZ_API RZ_BORROW RBTree *rz_analysis_get_bb_tree(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return &analysis->bb_tree;
}
RZ_API RZ_BORROW RzIntervalTree *rz_analysis_get_meta(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return &analysis->meta;
}
RZ_API RZ_BORROW RzSpaces *rz_analysis_get_meta_spaces(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return &analysis->meta_spaces;
}
RZ_API const char *rz_analysis_get_sdb_types_path(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->sdb_types_path;
}
RZ_API RZ_BORROW RzAnalysisDebugInfo *rz_analysis_get_debug_info(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->debug_info;
}
RZ_API void rz_analysis_set_debug_info(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzAnalysisDebugInfo *debug_info) {
rz_return_if_fail(analysis);
analysis->debug_info = debug_info;
}
RZ_API RZ_BORROW RzAnalysisILVM *rz_analysis_get_il_vm(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->il_vm;
}
RZ_API void rz_analysis_set_il_vm(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzAnalysisILVM *il_vm) {
rz_return_if_fail(analysis);
analysis->il_vm = il_vm;
}
RZ_API RZ_BORROW RzAnalysisOptions *rz_analysis_get_options(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return &analysis->opt;
}
RZ_API RZ_BORROW HtSP *rz_analysis_get_virtual_xrefs(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->ht_virtual_xrefs;
}
RZ_API RZ_BORROW HtUP *rz_analysis_get_xrefs_from(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->ht_xrefs_from;
}
RZ_API void rz_analysis_set_xrefs_from(RZ_NONNULL RzAnalysis *analysis, HtUP *xrefs_from) {
rz_return_if_fail(analysis);
analysis->ht_xrefs_from = xrefs_from;
}
RZ_API RZ_BORROW HtUP *rz_analysis_get_xrefs_to(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->ht_xrefs_to;
}
RZ_API void rz_analysis_set_xrefs_to(RZ_NONNULL RzAnalysis *analysis, HtUP *xrefs_to) {
rz_return_if_fail(analysis);
analysis->ht_xrefs_to = xrefs_to;
}
/**
* \brief Get the gadget cache for a specific gadget type.
* \param analysis Pointer to the RzAnalysis object.
* \param type The RzGadgetType of gadget cache to retrieve.
* \return A pointer to the requested RzGadgetCache, or NULL if the type is invalid.
*/
RZ_API RZ_BORROW RzGadgetCache *rz_analysis_get_gadget_cache(RZ_NONNULL RzAnalysis *analysis, RzGadgetType type) {
rz_return_val_if_fail(analysis, NULL);
if (type >= 3) {
return NULL;
}
return analysis->gadget_cache[type];
}
/**
* \brief Set the gadget cache in the analysis object for a specific gadget type.
*
* Takes ownership of `gadget_cache` pointer.
* The caller must not free it after passing it to this function.
* If a cache already exists for the given type, it will be freed before setting the new one.
*
* \param analysis Pointer to the RzAnalysis object.
* \param gadget_cache Pointer to the RzGadgetCache object to set.
* \param type The RzGadgetType of gadget cache to set.
*/
RZ_API void rz_analysis_set_gadget_cache(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzGadgetCache *gadget_cache, RzGadgetType type) {
rz_return_if_fail(analysis);
if (type < 3) {
if (analysis->gadget_cache[type] == gadget_cache) {
return;
}
// delete old cache
if (analysis->gadget_cache[type]) {
gadget_cache_free(analysis->gadget_cache[type]);
}
analysis->gadget_cache[type] = gadget_cache;
}
}
RZ_API RZ_BORROW HtUP *rz_analysis_get_gadget_semantics(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->ht_gadget_semantics;
}
RZ_API void rz_analysis_set_gadget_semantics(RZ_NONNULL RzAnalysis *analysis, HtUP *gadget_semantics) {
rz_return_if_fail(analysis);
analysis->ht_gadget_semantics = gadget_semantics;
}
RZ_API RZ_BORROW RzAnalysisCallbacks *rz_analysis_get_callbacks(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return &analysis->cb;
}
RZ_API const char *rz_analysis_get_os(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->os;
}
RZ_API void rz_analysis_set_syscall(RZ_NONNULL RzAnalysis *analysis, RzSyscall *sysc) {
rz_return_if_fail(analysis);
analysis->syscall = sysc;
}
RZ_API RZ_BORROW RzSyscall *rz_analysis_get_syscall(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->syscall;
}
RZ_API void rz_analysis_set_column_sort(RZ_NONNULL RzAnalysis *analysis, RzListComparator column_sort) {
rz_return_if_fail(analysis);
analysis->column_sort = column_sort;
}
RZ_API RZ_BORROW RzListComparator rz_analysis_get_column_sort(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->column_sort;
}
RZ_API void rz_analysis_set_sleep(RZ_NONNULL RzAnalysis *analysis, ut64 usecs) {
rz_return_if_fail(analysis);
analysis->sleep = usecs;
}
RZ_API ut64 rz_analysis_get_sleep(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, 0);
return analysis->sleep;
}
RZ_API void rz_analysis_set_segment_granularity(RZ_NONNULL RzAnalysis *analysis, int seggrn) {
rz_return_if_fail(analysis);
analysis->seggrn = seggrn;
}
RZ_API int rz_analysis_get_segment_granularity(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, 0);
return analysis->seggrn;
}
RZ_API void rz_analysis_set_imports(RZ_NONNULL RzAnalysis *analysis, RzList /*<char *>*/ *imports) {
rz_return_if_fail(analysis);
analysis->imports = imports;
}
RZ_API RzList /*<char *>*/ *rz_analysis_get_imports(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->imports;
}
RZ_API void rz_analysis_set_reflines(RZ_NONNULL RzAnalysis *analysis, RzPVector /*<RzAnalysisRefline *>*/ *reflines) {
rz_return_if_fail(analysis);
analysis->reflines = reflines;
}
RZ_API RzPVector /*<RzAnalysisRefline *>*/ *rz_analysis_get_reflines(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->reflines;
}
RZ_API void rz_analysis_set_max_reflines(RZ_NONNULL RzAnalysis *analysis, int maxreflines) {
rz_return_if_fail(analysis);
analysis->maxreflines = maxreflines;
}
RZ_API int rz_analysis_get_max_reflines(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, 0);
return analysis->maxreflines;
}
RZ_API void rz_analysis_set_lines_width(RZ_NONNULL RzAnalysis *analysis, int lineswidth) {
rz_return_if_fail(analysis);
analysis->lineswidth = lineswidth;
}
RZ_API int rz_analysis_get_lines_width(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, 0);
return analysis->lineswidth;
}
RZ_API void rz_analysis_set_gp(RZ_NONNULL RzAnalysis *analysis, ut64 new_gp) {
rz_return_if_fail(analysis);
analysis->gp = new_gp;
}
RZ_API RZ_BORROW ut64 rz_analysis_get_gp(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, 0);
return analysis->gp;
}
RZ_API void rz_analysis_set_cpp_abi(RZ_NONNULL RzAnalysis *analysis, RzAnalysisCPPABI cpp_abi) {
rz_return_if_fail(analysis);
analysis->cpp_abi = cpp_abi;
}
RZ_API RZ_BORROW RzAnalysisCPPABI rz_analysis_get_cpp_abi(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, 0);
return analysis->cpp_abi;
}
RZ_API void rz_analysis_set_recursive_noreturn(RZ_NONNULL RzAnalysis *analysis, bool enable) {
rz_return_if_fail(analysis);
analysis->recursive_noreturn = enable;
}
RZ_API RZ_BORROW bool rz_analysis_get_recursive_noreturn(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, 0);
return analysis->recursive_noreturn;
}
RZ_DEPRECATE RZ_API void rz_analysis_set_core(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE void *core) {
rz_return_if_fail(analysis);
analysis->core = core;
}
RZ_DEPRECATE RZ_API void rz_analysis_set_event(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzEvent *ev) {
rz_return_if_fail(analysis);
analysis->ev = ev;
}
RZ_DEPRECATE RZ_API const char *rz_analysis_get_arch(RZ_NONNULL const RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, RZ_SYS_ARCH);
return analysis->cur ? analysis->cur->name : RZ_SYS_ARCH;
}
RZ_DEPRECATE RZ_API int rz_analysis_get_bits(RZ_NONNULL const RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, 0);
return analysis->bits;
}
RZ_DEPRECATE RZ_API bool rz_analysis_is_big_endian_set(RZ_NONNULL const RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, false);
return analysis->big_endian;
}
RZ_DEPRECATE RZ_API void rz_analysis_set_last_disasm_reg(RZ_NONNULL RzAnalysis *analysis, ut8 *last_disasm_reg) {
rz_return_if_fail(analysis);
analysis->last_disasm_reg = last_disasm_reg;
}
RZ_DEPRECATE RZ_API ut8 *rz_analysis_get_last_disasm_reg(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->last_disasm_reg;
}
RZ_DEPRECATE RZ_API RzStrConstPool *rz_analysis_get_const_pool(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return &analysis->constpool;
}
static bool analysis_set_os(RzAnalysis *analysis, const char *os) {
rz_return_val_if_fail(analysis, false);
if (RZ_STR_ISEMPTY(os)) {
os = RZ_SYS_OS;
}
if (analysis->os && RZ_STR_EQ(analysis->os, os)) {
return true;
}
RZ_FREE(analysis->os);
analysis->os = rz_str_dup(os);
rz_type_db_set_os(analysis->typedb, analysis->os);
rz_type_db_reload(analysis->typedb, analysis->sdb_types_path);
return true;
}
RZ_API bool rz_analysis_set_triplet(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE const char *os, RZ_NULLABLE const char *arch, int bits) {
rz_return_val_if_fail(analysis, false);
if (RZ_STR_ISEMPTY(arch)) {
arch = analysis->cur ? analysis->cur->arch : RZ_SYS_ARCH;
}
if (bits < 1) {
bits = analysis->bits;
}
analysis_set_os(analysis, os);
rz_analysis_set_bits(analysis, bits);
return rz_analysis_use(analysis, arch);
}
RZ_API void rz_analysis_set_os(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE const char *os) {
rz_analysis_set_triplet(analysis, os, NULL, -1);
}
static bool is_arm_thumb_hack(RzAnalysis *analysis, int bits) {
if (!analysis || !analysis->cpu) {
return false;
}
if ((analysis->bits != bits) && !strcmp(analysis->cpu, "arm")) {
return (analysis->bits == 16 && bits == 32) || (analysis->bits == 32 && bits == 16);
}
return false;
}
RZ_API bool rz_analysis_set_bits(RzAnalysis *analysis, int bits) {
switch (bits) {
case 8:
case 16:
case 27:
case 32:
case 64:
if (analysis->bits != bits) {
bool is_hack = is_arm_thumb_hack(analysis, bits);
analysis->bits = bits;
int v = rz_analysis_archinfo(analysis, RZ_ANALYSIS_ARCHINFO_TEXT_ALIGN);
analysis->pcalign = RZ_MAX(1, v);
rz_type_db_set_bits(analysis->typedb, bits);
rz_type_db_set_address_bits(analysis->typedb, rz_analysis_get_address_bits(analysis));
if (!is_hack) {
rz_type_db_reload(analysis->typedb, analysis->sdb_types_path);
}
rz_analysis_set_reg_profile(analysis);
}
return true;
}
return false;
}
/**
* \brief The actual size of an address in bits.
*
* This may differ from analysis.bits in some cases such as arm thumb
* being identified as bits=16, but still using 32-bit addresses,
* or "8-bit" architectures like 6502 which still use 16-bit addresses.
*/
RZ_API int rz_analysis_get_address_bits(RzAnalysis *analysis) {
if (!analysis->cur || !analysis->cur->address_bits) {
return analysis->bits;
}
int r = analysis->cur->address_bits(analysis, analysis->bits);
return r > 0 ? r : analysis->bits;
}
RZ_API void rz_analysis_set_cpu(RzAnalysis *analysis, const char *cpu) {
if (RZ_STR_EQ(cpu, analysis->cpu)) {
return;
}
free(analysis->cpu);
analysis->cpu = rz_str_dup(cpu);
int v = rz_analysis_archinfo(analysis, RZ_ANALYSIS_ARCHINFO_TEXT_ALIGN);
analysis->pcalign = RZ_MAX(1, v);
rz_analysis_set_reg_profile(analysis);
if (RZ_STR_EQ(cpu, analysis->typedb->target->cpu)) {
return;
}
rz_type_db_set_cpu(analysis->typedb, cpu);
rz_type_db_reload(analysis->typedb, analysis->sdb_types_path);
}
/**
* \brief Get the currently selected CPU model.
*
* Prefer rz_analysis_is_cpu() when comparing this against some string.
*
* \return The current CPU model used by the analysis plugin.
*/
RZ_API RZ_NULLABLE const char *rz_analysis_get_cpu(RZ_NONNULL const RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->cpu;
}
/**
* \brief Returns true if the given cpu matches the current one.
*
* \param analysis The RzAnalysis structure to use
* \param[in] cpu The cpu expected
*
* \return If the given CPU matches returns true, otherwise false.
*/
RZ_API bool rz_analysis_is_cpu(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE const char *cpu) {
rz_return_val_if_fail(analysis, false);
if (!cpu) {
return false;
}
return RZ_STR_EQ(cpu, analysis->cpu);
}
RZ_API int rz_analysis_set_big_endian(RzAnalysis *analysis, int bigend) {
analysis->big_endian = bigend;
if (analysis->reg) {
analysis->reg->big_endian = bigend;
}
rz_type_db_set_endian(analysis->typedb, bigend);
return true;
}
RZ_API ut8 *rz_analysis_mask(RzAnalysis *analysis, ut32 size, const ut8 *data, ut64 at) {
RzAnalysisOp *op = NULL;
ut8 *ret = NULL;
int oplen = 0;
ut32 idx = 0;
if (!data) {
return NULL;
}
if (analysis->cur && analysis->cur->analysis_mask) {
return analysis->cur->analysis_mask(analysis, size, data, at);
}
if (!(op = rz_analysis_op_new())) {
return NULL;
}
if (!(ret = malloc(size))) {
rz_analysis_op_free(op);
return NULL;
}
memset(ret, 0xff, size);
while (idx < size) {
if ((oplen = rz_analysis_op(analysis, op, at, data + idx, size - idx, RZ_ANALYSIS_OP_MASK_BASIC)) < 1) {
break;
}
if ((op->ptr != UT64_MAX || op->jump != UT64_MAX) && op->nopcode != 0) {
memset(ret + idx + op->nopcode, 0, oplen - op->nopcode);
}
idx += oplen;
at += oplen;
rz_analysis_op_fini(op);
rz_analysis_op_init(op);
}
rz_analysis_op_free(op);
return ret;
}
RZ_API void rz_analysis_trace_bb(RzAnalysis *analysis, ut64 addr) {
RzAnalysisFunction *fcni;
fcni = rz_analysis_get_fcn_in(analysis, addr, 0);
if (!fcni) {
return;
}
void **it;
rz_pvector_foreach (fcni->bbs, it) {
RzAnalysisBlock *bbi = (RzAnalysisBlock *)*it;
if (addr >= bbi->addr && addr < (bbi->addr + bbi->size)) {
bbi->traced = true;
break;
}
}
}
RZ_API RzAnalysisOp *rz_analysis_op_hexstr(RzAnalysis *analysis, ut64 addr, const char *str) {
RzAnalysisOp *op = rz_analysis_op_new();
if (!op) {
return NULL;
}
ut8 *buf = calloc(1, strlen(str) + 1);
if (!buf) {
free(op);
return NULL;
}
int len = rz_hex_str2bin(str, buf);
rz_analysis_op(analysis, op, addr, buf, len, RZ_ANALYSIS_OP_MASK_BASIC);
free(buf);
return op;
}
/**
* \brief Checks \p op->type and \p op->eob if it marks the end of a block.
*
* \return True, if it is the end of a block. False otherwise.
*/
RZ_API bool rz_analysis_op_is_eob(const RzAnalysisOp *op) {
if (op->eob) {
return true;
}
switch (op->type & RZ_ANALYSIS_OP_TYPE_MASK) {
case RZ_ANALYSIS_OP_TYPE_JMP:
case RZ_ANALYSIS_OP_TYPE_UJMP:
case RZ_ANALYSIS_OP_TYPE_RJMP:
case RZ_ANALYSIS_OP_TYPE_IJMP:
case RZ_ANALYSIS_OP_TYPE_IRJMP:
case RZ_ANALYSIS_OP_TYPE_CJMP:
case RZ_ANALYSIS_OP_TYPE_RET:
case RZ_ANALYSIS_OP_TYPE_TRAP:
return true;
default:
return false;
}
}
/**
* \brief Returns true if the \p op is a call.
*/
RZ_API bool rz_analysis_op_is_call(RZ_NONNULL const RzAnalysisOp *op) {
rz_return_val_if_fail(op, false);
if ((op->type & RZ_ANALYSIS_OP_TYPE_CALL) == RZ_ANALYSIS_OP_TYPE_CALL ||
(op->type & RZ_ANALYSIS_OP_TYPE_UCALL) == RZ_ANALYSIS_OP_TYPE_UCALL) {
return true;
}
return false;
}
RZ_API void rz_analysis_purge(RzAnalysis *analysis) {
rz_analysis_hint_clear(analysis);
rz_interval_tree_fini(&analysis->meta);
rz_interval_tree_init(&analysis->meta, meta_item_free);
rz_type_db_purge(analysis->typedb);
sdb_reset(analysis->sdb_classes);
sdb_reset(analysis->sdb_classes_attrs);
sdb_reset(analysis->sdb_cc);
sdb_reset(analysis->sdb_noret);
rz_list_free(analysis->fcns);
analysis->fcns = rz_list_newf(rz_analysis_function_free);
rz_analysis_purge_imports(analysis);
}
/**
* \brief Returns the queried information regarding the current architecture
*
* \param analysis The RzAnalysis object to use
* \param[in] query The architecture detail to query
*
* \return Negative when fails.
*/
RZ_API int rz_analysis_archinfo(RzAnalysis *analysis, RzAnalysisInfoType query) {
rz_return_val_if_fail(analysis && query < RZ_ANALYSIS_ARCHINFO_ENUM_SIZE, -1);
if (!analysis->cur || !analysis->cur->archinfo) {
switch (query) {
case RZ_ANALYSIS_ARCHINFO_TEXT_ALIGN:
/* fall-thru */
case RZ_ANALYSIS_ARCHINFO_DATA_ALIGN:
/* fall-thru */
case RZ_ANALYSIS_ARCHINFO_MIN_OP_SIZE:
return 1;
case RZ_ANALYSIS_ARCHINFO_CAN_USE_POINTERS:
return true;
default:
return -1;
}
}
int value = analysis->cur->archinfo(analysis, query);
switch (query) {
case RZ_ANALYSIS_ARCHINFO_TEXT_ALIGN:
/* fall-thru */
case RZ_ANALYSIS_ARCHINFO_DATA_ALIGN:
/* fall-thru */
case RZ_ANALYSIS_ARCHINFO_MIN_OP_SIZE:
// Always consume at least 1 byte
return value > 0 ? value : 1;
case RZ_ANALYSIS_ARCHINFO_CAN_USE_POINTERS:
// When negative (i.e. error) we assume the architecture does use them.
return value < 0 ? true : value;
default:
return value;
}
return value;
}
static bool sdb_noret_addr_set(Sdb *db, ut64 addr, bool v) {
char key[128];
rz_strf(key, "addr.%" PFMT64x ".noreturn", addr);
return sdb_bool_set(db, key, v);
}
static bool sdb_noret_addr_get(Sdb *db, ut64 addr) {
char key[128];
rz_strf(key, "addr.%" PFMT64x ".noreturn", addr);
return sdb_bool_get(db, key);
}
static int sdb_noret_addr_unset(Sdb *db, ut64 addr) {
char key[128];
rz_strf(key, "addr.%" PFMT64x ".noreturn", addr);
return sdb_unset(db, key);
}
static bool sdb_noret_func_set(Sdb *db, const char *name, bool v) {
char *key = rz_str_newf("func.%s.noreturn", name);
if (!key) {
return false;
}
bool res = sdb_bool_set(db, key, v);
free(key);
return res;
}
static bool sdb_noret_func_get(Sdb *db, const char *name) {
char *key = rz_str_newf("func.%s.noreturn", name);
if (!key) {
return false;
}
bool res = sdb_bool_get(db, key);
free(key);
return res;
}
static int sdb_noret_func_unset(Sdb *db, const char *name) {
char *key = rz_str_newf("func.%s.noreturn", name);
if (!key) {
return false;
}
int res = sdb_unset(db, key);
free(key);
return res;
}
RZ_API bool rz_analysis_noreturn_add(RzAnalysis *analysis, const char *name, ut64 addr) {
const char *tmp_name = NULL;
Sdb *NDB = analysis->sdb_noret;
char *fnl_name = NULL;
if (addr != UT64_MAX) {
if (sdb_noret_addr_set(NDB, addr, true)) {
RzAnalysisFunction *fcn = rz_analysis_get_function_at(analysis, addr);
if (fcn) {
fcn->is_noreturn = true;
}
return true;
}
}
if (name && *name) {
tmp_name = name;
} else {
RzAnalysisFunction *fcn = rz_analysis_get_fcn_in(analysis, addr, -1);
RzFlagItem *fi = analysis->flb.get_at(analysis->flb.f, addr, false);
if (!fcn && !fi) {
RZ_LOG_ERROR("Cannot find function and flag at address 0x%" PFMT64x "\n", addr);
return false;
}
tmp_name = fcn ? fcn->name : fi->name;
if (fcn) {
fcn->is_noreturn = true;
}
}
if (rz_type_func_exist(analysis->typedb, tmp_name)) {
fnl_name = rz_str_dup(tmp_name);
} else if (!(fnl_name = rz_analysis_function_name_guess(analysis->typedb, (char *)tmp_name))) {
if (addr == UT64_MAX) {
if (name) {
sdb_noret_func_set(NDB, name, true);
} else {
RZ_LOG_ERROR("Cannot find prototype for: %s\n", tmp_name);
}
} else {
RZ_LOG_ERROR("Cannot find prototype for: %s\n", tmp_name);
}
// return false;
}
if (fnl_name) {
sdb_noret_func_set(NDB, fnl_name, true);
free(fnl_name);
}
return true;
}
RZ_API void rz_analysis_noreturn_drop(RzAnalysis *analysis, const char *expr) {
Sdb *NDB = analysis->sdb_noret;
expr = rz_str_trim_head_ro(expr);
const char *fcnname = NULL;
if (!strncmp(expr, "0x", 2)) {
ut64 n = rz_num_math(NULL, expr);
sdb_noret_addr_unset(NDB, n);
RzAnalysisFunction *fcn = rz_analysis_get_fcn_in(analysis, n, -1);
if (!fcn) {
// eprintf ("can't find function at 0x%"PFMT64x"\n", n);
return;
}
fcnname = fcn->name;
} else {
fcnname = expr;
}
sdb_noret_func_unset(NDB, fcnname);
return;
}
static bool rz_analysis_is_noreturn(RzAnalysis *analysis, const char *name) {
return rz_type_func_is_noreturn(analysis->typedb, name) ||
sdb_noret_func_get(analysis->sdb_noret, name);
}
static bool rz_analysis_noreturn_at_name(RzAnalysis *analysis, const char *name) {
if (rz_analysis_is_noreturn(analysis, name)) {
return true;
}
char *tmp = rz_analysis_function_name_guess(analysis->typedb, (char *)name);
if (tmp) {
if (rz_analysis_is_noreturn(analysis, tmp)) {
free(tmp);
return true;
}
free(tmp);
}
if (rz_str_startswith(name, "reloc.")) {
return rz_analysis_noreturn_at_name(analysis, name + 6);
}
return false;
}
RZ_API bool rz_analysis_noreturn_at_addr(RzAnalysis *analysis, ut64 addr) {
return sdb_noret_addr_get(analysis->sdb_noret, addr);
}
static bool noreturn_recurse(RzAnalysis *analysis, ut64 addr) {
RzAnalysisOp op = { 0 };
ut8 bbuf[0x10] = { 0 };
ut64 recurse_addr = UT64_MAX;
if (!analysis->iob.read_at(analysis->iob.io, addr, bbuf, sizeof(bbuf))) {
RZ_LOG_ERROR("Cannot read buffer at 0x%" PFMT64x "\n", addr);
return false;
}
if (rz_analysis_op(analysis, &op, addr, bbuf, sizeof(bbuf), RZ_ANALYSIS_OP_MASK_BASIC | RZ_ANALYSIS_OP_MASK_VAL) < 1) {
return false;
}
switch (op.type & RZ_ANALYSIS_OP_TYPE_MASK) {
case RZ_ANALYSIS_OP_TYPE_JMP:
if (op.jump == UT64_MAX) {
recurse_addr = op.ptr;
} else {
recurse_addr = op.jump;
}
break;
case RZ_ANALYSIS_OP_TYPE_UCALL:
case RZ_ANALYSIS_OP_TYPE_RCALL:
case RZ_ANALYSIS_OP_TYPE_ICALL:
case RZ_ANALYSIS_OP_TYPE_IRCALL:
recurse_addr = op.ptr;
break;
case RZ_ANALYSIS_OP_TYPE_CCALL:
case RZ_ANALYSIS_OP_TYPE_CALL:
recurse_addr = op.jump;
break;
}
if (recurse_addr == UT64_MAX || recurse_addr == addr) {
return false;
}
return rz_analysis_noreturn_at(analysis, recurse_addr);
}
RZ_API bool rz_analysis_noreturn_at(RzAnalysis *analysis, ut64 addr) {
if (!addr || addr == UT64_MAX) {
return false;
}
if (rz_analysis_noreturn_at_addr(analysis, addr)) {
return true;
}
/* XXX this is very slow */
RzAnalysisFunction *f = rz_analysis_get_function_at(analysis, addr);
if (f) {
if (rz_analysis_noreturn_at_name(analysis, f->name)) {
return true;
}
}
RzFlagItem *fi = analysis->cb.flag_get(analysis->flb.f, addr);
if (fi) {
if (rz_analysis_noreturn_at_name(analysis, fi->realname ? fi->realname : fi->name)) {
return true;
}
}
if (analysis->recursive_noreturn) {
return noreturn_recurse(analysis, addr);
}
return false;
}
static bool filter_noreturn(void *user, const SdbKv *kv) {
ut32 klen = sdbkv_key_len(kv);
ut32 vlen = sdbkv_value_len(kv);
return vlen == 4 && !strcmp(sdbkv_value(kv), "true") && klen > 9 && !strcmp(sdbkv_key(kv) + (klen - 9), ".noreturn");
}
RZ_API RzList /*<char *>*/ *rz_analysis_noreturn_functions(RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
// At first we read all noreturn functions from the Types DB
RzList *noretl = rz_type_noreturn_function_names(analysis->typedb);
// Then we propagate all noreturn functions that were inferred by
// the analysis process
void **iter;
RzPVector *items = sdb_get_items_filter(analysis->sdb_noret, filter_noreturn, NULL, false);
rz_pvector_foreach (items, iter) {
SdbKv *kv = *iter;
const char *k = sdbkv_key(kv);
const ut32 klen = sdbkv_key_len(kv);
// strlen("func." ".noreturn") = 14
if (klen > 14 && !strncmp(k, "func.", 5)) {
rz_list_append(noretl, rz_str_ndup(k + 5, klen - 14));
}
// strlen("addr." ".noreturn") = 14
if (RZ_BETWEEN(15, klen, 30) && !strncmp(k, "addr.", 5)) {
char addr[17];
memcpy(addr, k + 5, klen - 14);
addr[klen - 14] = '\0';
rz_list_append(noretl, rz_str_newf("0x%s", addr));
}
}
rz_pvector_free(items);
return noretl;
}
RZ_API void rz_analysis_bind(RzAnalysis *analysis, RzAnalysisBind *b) {
if (b) {
b->analysis = analysis;
b->get_fcn_in = rz_analysis_get_fcn_in;
b->get_hint = rz_analysis_hint_get;
}
}
RZ_API RzList /*<RzSearchKeyword *>*/ *rz_analysis_preludes(RzAnalysis *analysis) {
if (analysis->cur && analysis->cur->preludes) {
return analysis->cur->preludes(analysis);
}
return NULL;
}
static bool is_prelude(RzSearchKeyword *kw, const ut8 *data, size_t len) {
if (len < kw->keyword_length) {
return false;
}
len = RZ_MIN(len, kw->keyword_length);
ut64 offset = 0;
for (offset = 0; (len - offset) >= sizeof(ut64); offset += sizeof(ut64)) {
ut64 bval = rz_read_at_be64(data, offset);
ut64 eval = rz_read_at_be64(kw->bin_keyword, offset);
if (kw->bin_binmask && kw->binmask_length - offset > sizeof(ut64)) {
ut64 mask = rz_read_at_be64(kw->bin_binmask, offset);
bval &= mask;
}
if (bval != eval) {
return false;
}
}
for (; (len - offset) >= sizeof(ut32); offset += sizeof(ut32)) {
ut32 bval = rz_read_at_be32(data, offset);
ut32 eval = rz_read_at_be32(kw->bin_keyword, offset);
if (kw->bin_binmask && kw->binmask_length - offset > sizeof(ut32)) {
ut32 mask = rz_read_at_be32(kw->bin_binmask, offset);
bval &= mask;
}
if (bval != eval) {
return false;
}
}
if ((len - offset) >= sizeof(ut16)) {
ut16 bval = rz_read_at_be16(data, offset);
ut16 eval = rz_read_at_be16(kw->bin_keyword, offset);
if (kw->bin_binmask && kw->binmask_length - offset > sizeof(ut16)) {
ut16 mask = rz_read_at_be16(kw->bin_binmask, offset);
bval &= mask;
}
if (bval != eval) {
return false;
}
offset += sizeof(ut16);
}
if ((len - offset) >= sizeof(ut8)) {
ut8 bval = rz_read_at_be8(data, offset);
ut8 eval = rz_read_at_be8(kw->bin_keyword, offset);
if (kw->bin_binmask && kw->binmask_length - offset > sizeof(ut8)) {
ut8 mask = rz_read_at_be16(kw->bin_binmask, offset);
bval &= mask;
}
if (bval != eval) {
return false;
}
}
return true;
}
RZ_API bool rz_analysis_is_prelude(RzAnalysis *analysis, const ut8 *data, size_t len) {
RzList *l = rz_analysis_preludes(analysis);
RzSearchKeyword *kw;
RzListIter *iter;
rz_list_foreach (l, iter, kw) {
if (is_prelude(kw, data, len)) {
rz_list_free(l);
return true;
}
}
rz_list_free(l);
return false;
}
RZ_API void rz_analysis_add_import(RzAnalysis *analysis, const char *imp) {
RzListIter *it;
const char *eimp;
rz_list_foreach (analysis->imports, it, eimp) {
if (!strcmp(eimp, imp)) {
return;
}
}
char *cimp = rz_str_dup(imp);
if (!cimp) {
return;
}
rz_list_push(analysis->imports, cimp);
}
RZ_API void rz_analysis_remove_import(RzAnalysis *analysis, const char *imp) {
RzListIter *it;
const char *eimp;
rz_list_foreach (analysis->imports, it, eimp) {
if (!strcmp(eimp, imp)) {
rz_list_delete(analysis->imports, it);
return;
}
}
}
RZ_API void rz_analysis_purge_imports(RzAnalysis *analysis) {
rz_list_purge(analysis->imports);
}
RZ_DEPRECATE RZ_API RZ_BORROW RzAnalysisEsil *rz_analysis_get_esil(RZ_NONNULL RzAnalysis *analysis) {
rz_return_val_if_fail(analysis, NULL);
return analysis->esil;
}
RZ_DEPRECATE RZ_API void rz_analysis_set_esil(RZ_NONNULL RzAnalysis *analysis, RZ_NULLABLE RzAnalysisEsil *esil) {
rz_return_if_fail(analysis);
analysis->esil = esil;
}