Commit Graph

11304 Commits

Author SHA1 Message Date
pancake
15c10b2bdc Implement scr.break (word) 2016-12-17 10:42:15 +01:00
Anton Kochkov
df413fef42 Fix CID 1295065, 1362999 2016-12-17 01:11:54 +03:00
Anton Kochkov
37f1756139 Fix CID 1367283, 1367280 2016-12-17 00:54:56 +03:00
pancake
4f0bfc3756 Fix static linking of the bin.bflt plugin 2016-12-16 15:00:26 +01:00
Álvaro Felipe Melchor
f1a3b34000 fix build due to a typo 2016-12-16 14:29:16 +01:00
Álvaro Felipe Melchor
d6d453b4a1 renamed gum_read_sleb128 to r_sleb128
this API has been borrowed from the awesome Frida project
2016-12-16 13:38:36 +01:00
Álvaro Felipe Melchor
f2dc07b17a avoid leaking and added minor checks in dex 2016-12-16 13:37:57 +01:00
h4ng3r
85052941cf fix some coverity issues for dex format 2016-12-16 00:04:10 +01:00
alvaro_fe
10fe20ede6 simplify the process of loading fat binaries
We avoid parse everything more than once and just when needed
2016-12-15 21:04:28 +01:00
Álvaro Felipe Melchor
a874de805e clean up code applying coding style 2016-12-15 21:04:27 +01:00
Asutosh Palai
79a609630f [rarun2] Added pseudo tty for listen and connect (#6328)
* [rarun2] added pseudo tty for listen and connect
* Fixed the socket connect error message
* [rarun2] moved pseudo tty under pty option
2016-12-15 15:06:06 +01:00
pancake
4ae632133e Add $fl in the ?$? help 2016-12-15 00:18:21 +01:00
Marc
c585f91439 Dalvik analysis and bin parsing enhancements (#6320)
* Initial work to enhance the dalvik analysis with rbin info
* fix ptr addr in new-instance instruction in Dalvik Anal (#6082)
* dalvik anal:fix ptr addr in new-instance
* first ESIL instructions for Dalvik
* more ESIL instructions for Dalvik
* parse more data in dex format
* code refactor and several fixes
2016-12-15 00:14:33 +01:00
pancake
6ae8d68299 Fix r_str_glob and add command 'fla' 2016-12-15 00:13:26 +01:00
pancake
0b55b5454e Fix #6324 - Implement $fl as a variable for the "fl" command 2016-12-14 23:54:59 +01:00
Maijin
e7720b8f78 Fix ' in graph 2016-12-14 22:11:33 +01:00
Álvaro Felipe Melchor
1ec97d9c89 fixing bflt code trying to prevent futures crashes 2016-12-14 19:58:20 +01:00
pancake
c70c8f78ee Fix regressions in pf parsing and enhance error reporting 2016-12-14 16:09:45 +01:00
pancake
0053dfefd8 Fix #6316 - Check Cf format size 2016-12-14 13:56:58 +01:00
leberus
05076d963c Add: Initial support for bFLT v4 (#6315) 2016-12-14 10:34:11 +01:00
Francesco Tamagni
183fcb2107 Fix (not so) tiny macho creation (#6317)
* Fix tiny macho-32 creation
- add empty linkedit with empty symtab and dysymtab segments
- text segment should span the whole file
- fix main entry point
- fix load_dylib command format
* Fix tiny macho-64 creation
- mostly a port from 32-bit case
- except here we need a WRITABLE segment to make dyld happy
- i choose to make the __LINKEDIT segment WRITABLE (it's zero-sized after all)
2016-12-14 00:22:55 +01:00
pancake
cb5eff9efd Fix last covs 2016-12-13 13:11:42 +01:00
pancake
f6fb2b709f Fix #2673 - Add pdC 2016-12-13 13:06:22 +01:00
pancake
117b62e419 Rollback 370c50e2e8 2016-12-13 12:36:20 +01:00
pancake
3aafc7be5a Better handling of meta in pdi 2016-12-13 12:35:13 +01:00
pancake
bb124781a2 Fix #6257 - Honor meta in pCd and pdi 2016-12-13 02:37:28 +01:00
pancake
6342800ce4 Less newlines to fix #6297 2016-12-13 02:24:25 +01:00
pancake
370c50e2e8 Fix #6312 - Limit to 1GB files to be processed by rbin (workaround) 2016-12-13 02:15:18 +01:00
Álvaro Felipe Melchor
c5747f5c77 see all help with ?* and get rid of another infinite loop 2016-12-13 00:32:17 +01:00
pancake
ce59e5f6a1 Fix #6070 - Implement anal.timeout 2016-12-12 23:57:04 +01:00
Álvaro Felipe Melchor
e3b5059046 add proper define for ARM PE 2016-12-12 23:03:47 +01:00
pancake
4734202165 Fix dupes in aflj 2016-12-12 23:02:11 +01:00
pancake
d0f7c56aa3 Add support for ARM64 PE binaries 2016-12-12 22:39:10 +01:00
Álvaro Felipe Melchor
80279b11f6 change in ?* to make it grepeable 2016-12-12 22:22:19 +01:00
Álvaro Felipe Melchor
99660a899d fix infinite loop in d?* 2016-12-12 22:15:18 +01:00
Álvaro Felipe Melchor
15dc58f6ce Fix #6254 and make ?* breakable 2016-12-12 20:23:35 +01:00
Álvaro Felipe Melchor
234a3ca5fc clean up the code coding style mainly 2016-12-12 20:23:11 +01:00
pancake
faec18b74b Fix #5685 - Avoid dupped zignatures to be loaded 2016-12-12 18:33:00 +01:00
pancake
bf697820a4 Refix #6307 - uaf in esil 2016-12-12 17:29:50 +01:00
pancake
5d642bba04 Fix null deref in aoj 2016-12-12 16:24:46 +01:00
pancake
a7813c26db Fix #6294 - Add graph.comments 2016-12-12 15:45:18 +01:00
pancake
3cd649559e Honor hints in disasm, anal and emulation 2016-12-12 14:47:42 +01:00
pancake
43491b2030 Fix hint parsing 2016-12-12 13:22:03 +01:00
pancake
4598fc34ca Fix #6307 - Crash in r2 -a avr -AA 2016-12-11 23:19:54 +01:00
pancake
356d0725d2 Fix memleak in /P 2016-12-11 21:42:47 +01:00
Rakholiya Jenish
a376201e9e Fix android arm build and update integration of kernel map (#6306) 2016-12-11 00:02:35 +01:00
Simon IJskes
9bf0c49ff9 Fix ilen determination for z80 (#6305) 2016-12-10 23:30:32 +01:00
pancake
1ebc5e29ec Fix #6308 - Fix crash in /P and enhance the output 2016-12-10 23:29:32 +01:00
nil0x42
74ea0907f2 Add fV help (#6309) 2016-12-10 22:46:14 +01:00
jvoisin
b2d51971fe Fix a segfault with A?* 2016-12-10 22:28:51 +01:00
oddcoder
d4ab3adcec fixing wrong definition if setvbuf (#6304) 2016-12-10 10:41:06 +02:00
pancake
c041decf9b Fix libr.a for android 2016-12-10 01:48:46 +01:00
pancake
8d02b7fece Fix #6296 - Set esil->cmd to fix regression 2016-12-09 22:42:43 +01:00
pancake
6296f4b794 Add option to stop syscall tracing -before- the syscall is executed 2016-12-09 22:19:47 +01:00
pancake
4b43aaa5d7 Add SN in darwin-x86 reg profiles 2016-12-09 21:50:13 +01:00
pancake
07819e2f36 Fix #779 - Implement /P from r1 2016-12-09 19:57:55 +01:00
pancake
748ba2ce4a Fix md5 issue for size(0) in rabin2 -SK md5 2016-12-09 19:01:59 +01:00
pancake
d26917a0a2 Fix #6141 - implement pkill 2016-12-09 18:12:38 +01:00
pancake
8b57223838 Fix #3598 - Honor maps in search.in=file 2016-12-09 17:27:28 +01:00
pancake
a7cc5e494e Handle SYSENTER and SYSEXIT in anal.x86.cs 2016-12-09 17:09:57 +01:00
pancake
9ebb180ed3 Fix the remaining test to make travis happy 2016-12-09 17:05:30 +01:00
Rene Laemmert
ad852718f5 changed the iteration over the opcodes inside bbs for afva, added afva to a2f and added xrefs to the a2f command too (#6284)
* changed the iteration over the opcodes inside bbs for afva, added afva to a2f and added xrefs to the a2f command too

* indentation
2016-12-09 15:52:53 +01:00
BlueC0re
30cae123ed fix pdb json output (branch was never taken due to wrong mode) (#6295)
* fix pdb json output (branch was never taken due to wrong mode)

* don't output comma in case of error
2016-12-09 15:49:50 +01:00
pancake
4484781169 Fix last cov (uninit var) 2016-12-09 15:39:48 +01:00
pancake
529613dbbe Fix #6293 - V after agf not working 2016-12-09 15:29:15 +01:00
pancake
441220dd04 hwstep is possible on all linux-x86-64.. dunno why this canstep 2016-12-09 15:12:18 +01:00
Simon IJskes
1b996d765b fix djnz jump target miscalculation (#6290) 2016-12-08 16:42:30 +01:00
Gerardo García Peña
f40cbcee33 Set ATmega8 MCU by default. (#6291) 2016-12-08 01:22:54 +01:00
Álvaro Felipe Melchor
7edd787373 remove check in bin_mach0 already handled by fcn 2016-12-07 13:37:53 +01:00
Álvaro Felipe Melchor
940c9a9bf1 handle more data sections in objc mach files 2016-12-07 13:09:08 +01:00
pancake
5b7acbc42e Honor cfg.bigendian in wv 2016-12-06 15:25:49 +01:00
Álvaro Felipe Melchor
dca3bf8602 handle better data references 2016-12-05 20:07:32 +01:00
leberus
7f5a709a8f Add: pir command (#6276) 2016-12-05 19:41:37 +01:00
Álvaro Felipe Melchor
db0f4da4ff remove some fp entry points coming from TLS 2016-12-04 23:55:14 +01:00
Álvaro Felipe Melchor
028e8f0ca3 Fix few covs 2016-12-04 22:26:17 +01:00
Álvaro Felipe Melchor
15022e85e1 clean anal hints when using xtr plugin 2016-12-04 20:41:56 +01:00
leberus
e82a638006 Fix: #6278 (#6280) 2016-12-03 19:00:29 +01:00
pancake
8c96a90d09 Fix first visual seek to PC in debugger mode 2016-12-03 12:27:32 +01:00
pancake
025119779f Fix boundaries in p-j after aaa 2016-12-02 21:08:20 +01:00
pancake
3d03750056 Add rwx field in the p-j output 2016-12-02 20:44:32 +01:00
user.name
2e5e67ee08 Fix: regression in commit f0f54ad1c6 2016-12-02 18:20:19 +01:00
Álvaro Felipe Melchor
19724d5d89 Fix thumb/arm at entry when overlapp with symbol
entry points takes precedence
2016-12-02 17:49:46 +01:00
Álvaro Felipe Melchor
fc6000a8be Fix regression in fatmach0
$ r2 -a arm -b 64 mfan
Not enough data for SClassRoT
Not enough data for SClassRoT

mach0_classes.c handle the buffer of the mach instead of the whole
fatmach file. Thus we should revert physical addresses by obj->boffset on
sections.
2016-12-02 17:46:48 +01:00
Álvaro Felipe Melchor
35eb178c8b do not realign haddr in thumb mach0 2016-12-02 16:22:18 +01:00
Álvaro Felipe Melchor
4f8dcb3218 realign entry and set anal hints in arm mach0 2016-12-02 13:48:56 +01:00
Álvaro Felipe Melchor
884d2ddcc1 fix oob read in dwarf 2016-12-02 13:21:50 +01:00
Sven Steinbauer
e4b5f0f32b Cleanup opjc for x86_nz 2016-12-01 10:07:53 +00:00
pancake
13c15cb0a2 Fix #6268 - Deanonymize the AVR union 2016-12-01 10:54:35 +01:00
pancake
72e874c2ac Fix noreturn issue introduced with the flag_get_at aproximation 2016-12-01 10:48:00 +01:00
dequis
d505ecfacf anal: fix 'axf string ref' tests within axf.
Complements commmit 637e6db by reverting to the old axf behavior of
showing xrefs from a single address instead of the whole function,
but only if that specific address has xrefs. Otherwise it shows the
xrefs of the whole function

References #5113
2016-12-01 09:24:04 +01:00
pancake
5bb4568b55 Fix code injection vulns in new dmS 2016-12-01 09:20:02 +01:00
Ben Gardiner
97b3b86bba debug: new dmS command for listing sections of mapped libraries
This command is like dmi. It will list all the sections of the mapped
library by either shelling-out to rabin2 or calling r_core_info --
depending on whether filtering by library name was requested.

---
v3:
* more formatting (pancake)
* r_str_escape and quote the value passed in RABIN2_PREFIX env var (pancake)

v2:
 * formatting (pancake)
 * don't break out of the loop early
 * only strdup when I must [^1] (pancake)
 * I can't use r_sys_cmdf because then I can't filter the output with ~
    * reduce noise a little by calling r_sys_cmd_strf directly
 * iterate over the modules, not the maps

[^1]: The strdup of r_get_config(...,"bin.prefix") is needed because otherwise
we loose the original bin.prefix during the r_set_config(...,
"bin.prefix") calls in the loop.

review comments on dbg_maps
2016-12-01 09:15:22 +01:00
Ben Gardiner
4c890d0b52 config: fix double-free when setting bin.prefix more than once 2016-12-01 09:15:19 +01:00
Ben Gardiner
0269d63ff1 debug: fix db.maps.symbols.after.map.complete
This fixes a valgrind read past buffer error... I was seeing when
testing t.archos/Linux-x86_64/dbg_maps

```
Invalid read of size 8
==11424==    at 0x4C2F79E: memcpy@@GLIBC_2.14 (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==11424==    by 0x693C702: r_reg_set_bytes (arena.c:118)
[...]
==11424==  Address 0xa144430 is 0 bytes after a block of size 304 alloc'd
==11424==    at 0x4C2CC70: calloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==11424==    by 0x5D49EE6: r_debug_reg_sync (dreg.c:60)
[...]
```

---

v2:
* don't forget spaces around '+' (pancake)
2016-12-01 09:15:16 +01:00
Ben Gardiner
b4158201c2 rabin2, sections: fix missing prefixes on -S (was working for -rS) 2016-12-01 09:15:13 +01:00
Gerardo García Peña
9adec9da86 SPM instruction (not tested). (#6274) 2016-12-01 09:10:34 +01:00
Elia Geretto
31e8d7cb68 Fix various memory leaks (#6272)
* Fix bits_ranges memory leak in anal.c
* Fix anal->reg memory leak and prevent use after free in plugin.c
* Fix reg->allregs memory leak in reg.c
* Fix dbg->plugins memory leak in debug.c
* Fix io->plugin_default memory leak in io.c
* Fix plugin_free not deallocating plugin in bin.c
* Adapt to style guidelines
* Fix memory leak in r_bin_object_free and resolve double free
* Fix o->kv memory leak in r_bin_object_set_items
* Fix memory leak pushing arena on reg init
* Fix io->plugin_default memory leak in io.c
* Adapt to style guidelines
* Fix pfile memory leak in radare2.c
* Add braces to if in bin.c
2016-12-01 09:09:59 +01:00
pancake
5463ce4934 Try to find strings in LEA references, not just flags 2016-11-30 18:00:23 +01:00
pancake
cb06c9c26b Fix #6270 - Honor current offset when assembling conditional jumps in x86 2016-11-30 16:22:34 +01:00
Rakholiya Jenish
c7c1fad14f add all ioctl (#6265)
use PFMT64x

fix things
2016-11-29 14:00:58 +01:00