Now we build a list of ranges (RAnalRange) based on anal hints to handle the bits in a better way in the case of arm/thumb Now instead of asm.bits that rules the whole binary we can define ranges with anal hints
531 lines
12 KiB
C
531 lines
12 KiB
C
/* radare - LGPL - Copyright 2009-2016 - pancake, nibble */
|
|
|
|
#include <r_anal.h>
|
|
#include <r_util.h>
|
|
#include <r_list.h>
|
|
#include <r_io.h>
|
|
#include "../config.h"
|
|
|
|
R_LIB_VERSION(r_anal);
|
|
|
|
static RAnalPlugin *anal_static_plugins[] =
|
|
{ R_ANAL_STATIC_PLUGINS };
|
|
|
|
R_API void r_anal_set_limits(RAnal *anal, ut64 from, ut64 to) {
|
|
free (anal->limit);
|
|
anal->limit = R_NEW0 (RAnalRange);
|
|
if (anal->limit) {
|
|
anal->limit->from = from;
|
|
anal->limit->to = to;
|
|
}
|
|
}
|
|
|
|
R_API void r_anal_unset_limits(RAnal *anal) {
|
|
R_FREE (anal->limit);
|
|
}
|
|
|
|
static void meta_unset_for(void *user, int idx) {
|
|
RSpaces *s = (RSpaces*)user;
|
|
RAnal *anal = (RAnal*)s->user;
|
|
r_meta_space_unset_for (anal, idx);
|
|
}
|
|
|
|
static int meta_count_for(void *user, int idx) {
|
|
int ret;
|
|
RSpaces *s = (RSpaces*)user;
|
|
RAnal *anal = (RAnal*)s->user;
|
|
ret = r_meta_space_count_for (anal, idx);
|
|
return ret;
|
|
}
|
|
|
|
R_API RAnal *r_anal_new() {
|
|
int i;
|
|
RAnal *anal = R_NEW0 (RAnal);
|
|
if (!anal) {
|
|
return NULL;
|
|
}
|
|
anal->os = strdup (R_SYS_OS);
|
|
anal->noreturn = r_list_newf ((RListFree)&r_anal_noreturn_free);
|
|
anal->reflines = anal->reflines2 = NULL;
|
|
anal->esil_goto_limit = R_ANAL_ESIL_GOTO_LIMIT;
|
|
anal->limit = NULL;
|
|
anal->opt.nopskip = true; // skip nops in code analysis
|
|
anal->decode = true; // slow slow if not used
|
|
anal->gp = 0LL;
|
|
anal->sdb = sdb_new0 ();
|
|
anal->opt.noncode = false; // do not analyze data by default
|
|
anal->sdb_fcns = sdb_ns (anal->sdb, "fcns", 1);
|
|
anal->sdb_meta = sdb_ns (anal->sdb, "meta", 1);
|
|
r_space_init (&anal->meta_spaces,
|
|
meta_unset_for, meta_count_for, anal);
|
|
anal->sdb_hints = sdb_ns (anal->sdb, "hints", 1);
|
|
anal->sdb_xrefs = sdb_ns (anal->sdb, "xrefs", 1);
|
|
anal->sdb_types = sdb_ns (anal->sdb, "types", 1);
|
|
anal->sdb_cc = sdb_ns (anal->sdb, "cc", 1);
|
|
anal->cb_printf = (PrintfCallback) printf;
|
|
(void)r_anal_pin_init (anal);
|
|
(void)r_anal_xrefs_init (anal);
|
|
anal->diff_thbb = R_ANAL_THRESHOLDBB;
|
|
anal->diff_thfcn = R_ANAL_THRESHOLDFCN;
|
|
anal->split = true; // used from core
|
|
anal->syscall = r_syscall_new ();
|
|
r_io_bind_init (anal->iob);
|
|
r_flag_bind_init (anal->flb);
|
|
anal->reg = r_reg_new ();
|
|
anal->bits_ranges = r_list_newf (free);
|
|
anal->lineswidth = 0;
|
|
anal->fcns = r_anal_fcn_list_new ();
|
|
#if USE_NEW_FCN_STORE
|
|
anal->fcnstore = r_listrange_new ();
|
|
#endif
|
|
anal->refs = r_anal_ref_list_new ();
|
|
anal->types = r_anal_type_list_new ();
|
|
r_anal_set_bits (anal, 32);
|
|
anal->plugins = r_list_newf ((RListFree) r_anal_plugin_free);
|
|
if (anal->plugins) {
|
|
for (i = 0; anal_static_plugins[i]; i++) {
|
|
r_anal_add (anal, anal_static_plugins[i]);
|
|
}
|
|
}
|
|
return anal;
|
|
}
|
|
|
|
R_API void r_anal_plugin_free (RAnalPlugin *p) {
|
|
if (p && p->fini) {
|
|
p->fini (NULL);
|
|
}
|
|
}
|
|
|
|
R_API RAnal *r_anal_free(RAnal *a) {
|
|
if (!a) return NULL;
|
|
/* TODO: Free anals here */
|
|
R_FREE (a->cpu);
|
|
R_FREE (a->os);
|
|
r_list_free (a->plugins);
|
|
r_list_free (a->noreturn);
|
|
a->fcns->free = r_anal_fcn_free;
|
|
r_list_free (a->fcns);
|
|
r_space_fini (&a->meta_spaces);
|
|
r_anal_pin_fini (a);
|
|
r_list_free (a->refs);
|
|
r_list_free (a->types);
|
|
r_reg_free (a->reg);
|
|
r_anal_op_free (a->queued);
|
|
a->sdb = NULL;
|
|
r_syscall_free (a->syscall);
|
|
sdb_ns_free (a->sdb);
|
|
if (a->esil) {
|
|
r_anal_esil_free (a->esil);
|
|
a->esil = NULL;
|
|
}
|
|
memset (a, 0, sizeof (RAnal));
|
|
free (a);
|
|
return NULL;
|
|
}
|
|
|
|
R_API void r_anal_set_user_ptr(RAnal *anal, void *user) {
|
|
anal->user = user;
|
|
}
|
|
|
|
R_API int r_anal_add(RAnal *anal, RAnalPlugin *foo) {
|
|
if (foo->init) {
|
|
foo->init (anal->user);
|
|
}
|
|
r_list_append (anal->plugins, foo);
|
|
return true;
|
|
}
|
|
|
|
// TODO: Must be deprecated
|
|
R_API void r_anal_list(RAnal *anal) {
|
|
RAnalPlugin *h;
|
|
RListIter *it;
|
|
r_list_foreach (anal->plugins, it, h) {
|
|
anal->cb_printf ("anal %-10s %s\n", h->name, h->desc);
|
|
}
|
|
}
|
|
|
|
R_API bool r_anal_use(RAnal *anal, const char *name) {
|
|
RListIter *it;
|
|
RAnalPlugin *h;
|
|
r_list_foreach (anal->plugins, it, h) {
|
|
if (!strcmp (h->name, name)) {
|
|
anal->cur = h;
|
|
r_anal_set_reg_profile (anal);
|
|
r_anal_set_fcnsign (anal, NULL);
|
|
if (anal->esil) {
|
|
r_anal_esil_free (anal->esil);
|
|
anal->esil = NULL;
|
|
}
|
|
return true;
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
R_API char *r_anal_get_reg_profile(RAnal *anal) {
|
|
if (anal && anal->cur && anal->cur->get_reg_profile)
|
|
return anal->cur->get_reg_profile (anal);
|
|
return NULL;
|
|
}
|
|
|
|
// deprecate.. or at least reuse get_reg_profile...
|
|
R_API bool r_anal_set_reg_profile(RAnal *anal) {
|
|
bool ret = false;
|
|
if (anal && anal->cur && anal->cur->set_reg_profile) {
|
|
ret = anal->cur->set_reg_profile (anal);
|
|
} else {
|
|
char *p = r_anal_get_reg_profile (anal);
|
|
if (p && *p) {
|
|
r_reg_set_profile_string (anal->reg, p);
|
|
ret = true;
|
|
}
|
|
free (p);
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
R_API bool r_anal_set_fcnsign(RAnal *anal, const char *name) {
|
|
#define FCNSIGNPATH R2_LIBDIR"/radare2/"R2_VERSION"/fcnsign"
|
|
char *file = NULL;
|
|
const char *arch;
|
|
if (anal->cur && anal->cur->arch) {
|
|
arch = anal->cur->arch;
|
|
} else arch = R_SYS_ARCH;
|
|
if (!arch) {
|
|
return false;
|
|
}
|
|
if (name && *name) {
|
|
file = sdb_fmt (0, "%s/%s.sdb", FCNSIGNPATH, name);
|
|
} else {
|
|
file = sdb_fmt (0, "%s/%s-%s-%d.sdb", FCNSIGNPATH,
|
|
anal->os, arch, anal->bits);
|
|
}
|
|
if (r_file_exists (file)) {
|
|
sdb_close (anal->sdb_fcnsign);
|
|
sdb_free (anal->sdb_fcnsign);
|
|
anal->sdb_fcnsign = sdb_new (0, file, 0);
|
|
sdb_ns_set (anal->sdb, "fcnsign", anal->sdb_fcnsign);
|
|
return (anal->sdb_fcnsign != NULL);
|
|
}
|
|
return false;
|
|
}
|
|
|
|
R_API const char *r_anal_get_fcnsign(RAnal *anal, const char *sym) {
|
|
return sdb_const_get (anal->sdb_fcnsign, sym, 0);
|
|
}
|
|
|
|
R_API int r_anal_set_triplet(RAnal *anal, const char *os, const char *arch, int bits) {
|
|
if (!os || !*os) os = R_SYS_OS;
|
|
if (!arch || !*arch) arch = anal->cur? anal->cur->arch: R_SYS_ARCH;
|
|
if (bits<1) bits = anal->bits;
|
|
free (anal->os);
|
|
anal->os = strdup (os);
|
|
r_anal_set_bits (anal, bits);
|
|
return r_anal_use (anal, arch);
|
|
}
|
|
|
|
R_API bool r_anal_set_os(RAnal *anal, const char *os) {
|
|
return r_anal_set_triplet (anal, os, NULL, -1);
|
|
}
|
|
|
|
R_API bool r_anal_set_bits(RAnal *anal, int bits) {
|
|
switch (bits) {
|
|
case 8:
|
|
case 16:
|
|
case 32:
|
|
case 64:
|
|
anal->bits = bits;
|
|
r_anal_set_fcnsign (anal, NULL);
|
|
r_anal_set_reg_profile (anal);
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
R_API void r_anal_set_cpu(RAnal *anal, const char *cpu) {
|
|
free (anal->cpu);
|
|
anal->cpu = cpu ? strdup (cpu) : NULL;
|
|
}
|
|
|
|
R_API int r_anal_set_big_endian(RAnal *anal, int bigend) {
|
|
anal->big_endian = bigend;
|
|
anal->reg->big_endian = bigend;
|
|
return true;
|
|
}
|
|
|
|
R_API char *r_anal_strmask (RAnal *anal, const char *data) {
|
|
RAnalOp *op = NULL;
|
|
ut8 *buf = NULL;
|
|
char *ret = NULL;
|
|
int oplen, len, idx = 0;
|
|
|
|
if (data && *data) {
|
|
ret = strdup (data);
|
|
buf = malloc (1 + strlen (data));
|
|
op = r_anal_op_new ();
|
|
}
|
|
if (!op || !ret || !buf) {
|
|
free (op);
|
|
free (buf);
|
|
free (ret);
|
|
return NULL;
|
|
}
|
|
len = r_hex_str2bin (data, buf);
|
|
while (idx < len) {
|
|
if ((oplen = r_anal_op (anal, op, 0, buf+idx, len-idx)) <1)
|
|
break;
|
|
switch (op->type) {
|
|
case R_ANAL_OP_TYPE_CALL:
|
|
case R_ANAL_OP_TYPE_UCALL:
|
|
case R_ANAL_OP_TYPE_CJMP:
|
|
case R_ANAL_OP_TYPE_JMP:
|
|
case R_ANAL_OP_TYPE_UJMP:
|
|
if (op->nopcode != 0)
|
|
memset (ret+(idx+op->nopcode)*2,
|
|
'.', (oplen-op->nopcode)*2);
|
|
}
|
|
idx += oplen;
|
|
}
|
|
free (op);
|
|
free (buf);
|
|
return ret;
|
|
}
|
|
|
|
R_API void r_anal_trace_bb(RAnal *anal, ut64 addr) {
|
|
RAnalBlock *bbi;
|
|
RAnalFunction *fcni;
|
|
RListIter *iter2;
|
|
#define OLD 0
|
|
#if OLD
|
|
RListIter *iter;
|
|
r_list_foreach (anal->fcns, iter, fcni) {
|
|
r_list_foreach (fcni->bbs, iter2, bbi) {
|
|
if (addr>=bbi->addr && addr<(bbi->addr+bbi->size)) {
|
|
bbi->traced = true;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
#else
|
|
fcni = r_anal_get_fcn_in (anal, addr, 0);
|
|
if (fcni) {
|
|
r_list_foreach (fcni->bbs, iter2, bbi) {
|
|
if (addr >= bbi->addr && addr < (bbi->addr + bbi->size)) {
|
|
bbi->traced = true;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
#endif
|
|
}
|
|
|
|
R_API RList* r_anal_get_fcns (RAnal *anal) {
|
|
// avoid received to free this thing
|
|
anal->fcns->free = NULL;
|
|
return anal->fcns;
|
|
}
|
|
|
|
R_API bool r_anal_project_save(RAnal *anal, const char *prjfile) {
|
|
if (prjfile && *prjfile) {
|
|
return r_anal_xrefs_save (anal, prjfile);
|
|
}
|
|
return false;
|
|
}
|
|
|
|
R_API RAnalOp *r_anal_op_hexstr(RAnal *anal, ut64 addr, const char *str) {
|
|
int len;
|
|
ut8 *buf;
|
|
RAnalOp *op = R_NEW0 (RAnalOp);
|
|
if (!op) {
|
|
return NULL;
|
|
}
|
|
buf = calloc (1, strlen (str) + 1);
|
|
if (!buf) {
|
|
free (op);
|
|
return NULL;
|
|
}
|
|
len = r_hex_str2bin (str, buf);
|
|
r_anal_op (anal, op, addr, buf, len);
|
|
free (buf);
|
|
return op;
|
|
}
|
|
|
|
R_API bool r_anal_op_is_eob (RAnalOp *op) {
|
|
if (op->eob) {
|
|
return true;
|
|
}
|
|
switch (op->type) {
|
|
case R_ANAL_OP_TYPE_JMP:
|
|
case R_ANAL_OP_TYPE_UJMP:
|
|
case R_ANAL_OP_TYPE_CJMP:
|
|
case R_ANAL_OP_TYPE_RET:
|
|
case R_ANAL_OP_TYPE_TRAP:
|
|
return true;
|
|
default:
|
|
return false;
|
|
}
|
|
}
|
|
|
|
R_API int r_anal_purge (RAnal *anal) {
|
|
sdb_reset (anal->sdb_fcns);
|
|
sdb_reset (anal->sdb_meta);
|
|
sdb_reset (anal->sdb_hints);
|
|
sdb_reset (anal->sdb_xrefs);
|
|
sdb_reset (anal->sdb_types);
|
|
r_list_free (anal->fcns);
|
|
anal->fcns = r_anal_fcn_list_new ();
|
|
#if USE_NEW_FCN_STORE
|
|
r_listrange_free (anal->fcnstore);
|
|
anal->fcnstore = r_listrange_new ();
|
|
#endif
|
|
r_list_free (anal->refs);
|
|
anal->refs = r_anal_ref_list_new ();
|
|
r_list_free (anal->types);
|
|
anal->types = r_anal_type_list_new ();
|
|
return 0;
|
|
}
|
|
|
|
R_API int r_anal_archinfo(RAnal *anal, int query) {
|
|
switch (query) {
|
|
case R_ANAL_ARCHINFO_MIN_OP_SIZE:
|
|
case R_ANAL_ARCHINFO_MAX_OP_SIZE:
|
|
case R_ANAL_ARCHINFO_ALIGN:
|
|
if (anal && anal->cur && anal->cur->archinfo) {
|
|
return anal->cur->archinfo (anal, query);
|
|
}
|
|
break;
|
|
}
|
|
return -1;
|
|
}
|
|
|
|
R_API void r_anal_noreturn_free(RAnalNoreturn *nr) {
|
|
free (nr->name);
|
|
free (nr);
|
|
}
|
|
|
|
R_API void r_anal_noreturn_list(RAnal *anal, int mode) {
|
|
RListIter *iter;
|
|
RAnalNoreturn *nr;
|
|
r_list_foreach (anal->noreturn, iter, nr) {
|
|
switch (mode) {
|
|
case 1:
|
|
case '*':
|
|
case 'r':
|
|
if (nr->name) anal->cb_printf ("ann %s\n", nr->name);
|
|
else anal->cb_printf ("0x%08"PFMT64x"\n", nr->addr);
|
|
break;
|
|
default:
|
|
if (nr->name) anal->cb_printf ("%s\n", nr->name);
|
|
else anal->cb_printf ("0x%08"PFMT64x"\n", nr->addr);
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
R_API bool r_anal_noreturn_add(RAnal *anal, const char *name, ut64 addr) {
|
|
RAnalNoreturn *nr = R_NEW0(RAnalNoreturn);
|
|
if (!nr) return false;
|
|
if (name && *name) nr->name = strdup (name);
|
|
nr->addr = addr;
|
|
if (!nr->name && !nr->addr) {
|
|
free (nr);
|
|
return false;
|
|
}
|
|
r_list_append (anal->noreturn, nr);
|
|
return true;
|
|
}
|
|
|
|
R_API int r_anal_noreturn_drop(RAnal *anal, const char *expr) {
|
|
bool ret = false;
|
|
if (!strcmp (expr, "*")) {
|
|
if (!r_list_empty (anal->noreturn)) {
|
|
r_list_free (anal->noreturn);
|
|
anal->noreturn = r_list_newf ((RListFree)&r_anal_noreturn_free);
|
|
ret = true;
|
|
}
|
|
} else {
|
|
RListIter *iter, *iter2;
|
|
RAnalNoreturn *nr;
|
|
if (!strncmp (expr, "0x", 2)) {
|
|
ut64 n = r_num_math (NULL, expr);
|
|
r_list_foreach_safe (anal->noreturn, iter, iter2, nr) {
|
|
if (nr->addr == n) {
|
|
r_list_delete (anal->noreturn, iter);
|
|
ret = true;
|
|
}
|
|
}
|
|
} else {
|
|
r_list_foreach_safe (anal->noreturn, iter, iter2, nr) {
|
|
if (r_str_glob (nr->name, expr)) {
|
|
r_list_delete (anal->noreturn, iter);
|
|
ret = true;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
R_API bool r_anal_noreturn_at(RAnal *anal, ut64 addr) {
|
|
RListIter *iter;
|
|
RAnalNoreturn *nr;
|
|
RAnalFunction *f = r_anal_get_fcn_at (anal, addr, 0);
|
|
RFlagItem *fi = anal->flb.get_at (anal->flb.f, addr);
|
|
r_list_foreach (anal->noreturn, iter, nr) {
|
|
if (nr->name) {
|
|
RFlagItem *fi2 = anal->flb.get (anal->flb.f, nr->name);
|
|
if (fi2 && fi2->offset == addr)
|
|
return true;
|
|
if (f && !strcmp (f->name, nr->name))
|
|
return true;
|
|
if (fi && fi->name && !strcmp (fi->name, nr->name))
|
|
return true;
|
|
} else {
|
|
if (addr == nr->addr)
|
|
return true;
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
static int cmp_range(const void *a, const void *b) {
|
|
RAnalRange *range_a = (RAnalRange *)a;
|
|
RAnalRange *range_b = (RAnalRange *)b;
|
|
return range_a->from > range_b->from;
|
|
}
|
|
|
|
static int build_range(void *p, const char *k, const char *v) {
|
|
RAnal *a = (RAnal *)p;
|
|
RList *list_range = a->bits_ranges;
|
|
RAnalHint *hint;
|
|
hint = r_anal_hint_from_string (a, sdb_atoi (k + 5), v);
|
|
if (hint->bits) {
|
|
RAnalRange *range = R_NEW0 (RAnalRange);
|
|
if (!range) {
|
|
return 0;
|
|
}
|
|
range->bits = hint->bits;
|
|
range->from = hint->addr;
|
|
r_list_append (list_range, range);
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
|
|
//based on anal hint we construct a list of RAnalRange to handle
|
|
//better arm/thumb though maybe handy in other contexts
|
|
R_API void r_anal_build_range_on_hints(RAnal *a) {
|
|
RListIter *iter;
|
|
RAnalRange *range;
|
|
//construct again the range from hint to handle properly arm/thumb
|
|
r_list_free (a->bits_ranges);
|
|
a->bits_ranges = r_list_new ();
|
|
a->bits_ranges->free = free;
|
|
sdb_foreach (a->sdb_hints, build_range, a);
|
|
r_list_sort (a->bits_ranges, cmp_range);
|
|
r_list_foreach (a->bits_ranges, iter, range) {
|
|
if (iter->n && !range->to) {
|
|
range->to = ((RAnalRange *)(iter->n->data))->from;
|
|
}
|
|
}
|
|
}
|