mirror of
https://github.com/capstone-engine/capstone.git
synced 2024-11-23 21:49:46 +00:00
b227acc29c
* Basic changes of new arch - BPF * Define some constants * defined some API methods * Able to print MISC instruction * Follow Linux coding style * Ability to show ALU insn names * decode return * Add suite/MC/BPF * decode jump * decode store * decode load * print instruction done * try to implement BPF_reg_access * Implements explicit accessed registers and fix some tiny bugs * Fix unhandled ja case * Added BPF_REG_OFF do fix wrong display in jump class * Great I'm able to decode cBPF with eyes * Fix: misunderstood the 16-byte instruction's imm * Add ldxdw * Add extended-all.cs * Implements cstest/bpf_getdetail.c * Fix memory leak * Add BPF to fuzz * Implemented regs_read and regs_write * Fix missing write-access on ALU's dst * Updated cstool/, test_basic.c, test_detail.c, and test_iter.c * Updated docs * Fix type of cs_bpf#operands * Implements python bindings * Fix some bugs found by self code review * Remove dummy tests * remove typeof * Address comments * Fix MSVC's warnings and add test_bpf.py to bindings/python/Makefile * Fix: call is not offset
28 lines
561 B
C
28 lines
561 B
C
/* Capstone Disassembly Engine */
|
|
/* BPF Backend by david942j <david942j@gmail.com>, 2019 */
|
|
|
|
#ifndef CS_BPF_DISASSEMBLER_H
|
|
#define CS_BPF_DISASSEMBLER_H
|
|
|
|
#include "../../MCInst.h"
|
|
|
|
typedef struct bpf_internal {
|
|
uint16_t op;
|
|
uint64_t k;
|
|
/* for cBPF */
|
|
uint8_t jt;
|
|
uint8_t jf;
|
|
/* for eBPF */
|
|
uint8_t dst;
|
|
uint8_t src;
|
|
uint16_t offset;
|
|
|
|
/* length of this bpf instruction */
|
|
uint8_t insn_size;
|
|
} bpf_internal;
|
|
|
|
bool BPF_getInstruction(csh ud, const uint8_t *code, size_t code_len,
|
|
MCInst *instr, uint16_t *size, uint64_t address, void *info);
|
|
|
|
#endif
|