mirror of
https://github.com/radareorg/radare2.git
synced 2024-12-14 00:38:55 +00:00
4c0b8f437b
* Autocomplete 'dcu' argument * Analyze [pc+delta] mov and lea opcodes on x86-64 - Resolves indirect string pointers for ObjectiveC binaries * Handle UCALL in dso * Fix x86-64 register profile for OSX * Implement r_mem_get_num() * Various fixes in 'pf' command
506 lines
16 KiB
C
506 lines
16 KiB
C
/* radare - LGPL - Copyright 2009-2011 // nibble<.ds@gmail.com>, pancake<nopcode.org> */
|
|
#include "r_core.h"
|
|
|
|
static char *filter_refline(const char *str) {
|
|
char *p, *s = strdup (str);
|
|
p = strstr (s, "->");
|
|
if (p) p[0]=p[1]=' ';
|
|
p = strstr (s, "=<");
|
|
if (p) p[0]=p[1]=' ';
|
|
for (p=s; *p; p++) {
|
|
if (*p=='`') *p = '|';
|
|
if (*p=='-') *p = ' ';
|
|
if (*p=='=') *p = '|';
|
|
}
|
|
return s;
|
|
}
|
|
|
|
static void printoffset(ut64 off, int show_color) {
|
|
if (show_color)
|
|
r_cons_printf (Color_GREEN"0x%08"PFMT64x" "Color_RESET, off);
|
|
else r_cons_printf ("0x%08"PFMT64x" ", off);
|
|
}
|
|
|
|
R_API int r_core_print_disasm(RPrint *p, RCore *core, ut64 addr, ut8 *buf, int len, int l) {
|
|
RAnalCC cc = {0};
|
|
RAnalFcn *f = NULL;
|
|
int ret, idx, i, j, k, lines, ostackptr = 0, stackptr = 0;
|
|
int counter = 0;
|
|
int middle = 0;
|
|
char str[128], strsub[128];
|
|
char *line = NULL, *comment, *opstr, *osl = NULL; // old source line
|
|
char *refline = NULL;
|
|
RAsmOp asmop;
|
|
RAnalOp analop;
|
|
RFlagItem *flag;
|
|
RMetaItem *mi;
|
|
ut64 dest = UT64_MAX;
|
|
|
|
// TODO: import values from debugger is possible
|
|
// TODO: allow to get those register snapshots from traces
|
|
// TODO: per-function register state trace
|
|
|
|
// TODO: All those options must be print flags
|
|
int show_color = r_config_get_i (core->config, "scr.color");
|
|
int decode = r_config_get_i (core->config, "asm.decode");
|
|
int pseudo = r_config_get_i (core->config, "asm.pseudo");
|
|
int filter = r_config_get_i (core->config, "asm.filter");
|
|
int varsub = r_config_get_i (core->config, "asm.varsub");
|
|
int show_lines = r_config_get_i (core->config, "asm.lines");
|
|
int show_dwarf = r_config_get_i (core->config, "asm.dwarf");
|
|
int show_linescall = r_config_get_i (core->config, "asm.linescall");
|
|
int show_trace = r_config_get_i (core->config, "asm.trace");
|
|
int linesout = r_config_get_i (core->config, "asm.linesout");
|
|
int adistrick = r_config_get_i (core->config, "asm.middle"); // TODO: find better name
|
|
int show_offset = r_config_get_i (core->config, "asm.offset");
|
|
int show_bytes = r_config_get_i (core->config, "asm.bytes");
|
|
int show_comments = r_config_get_i (core->config, "asm.comments");
|
|
int show_stackptr = r_config_get_i (core->config, "asm.stackptr");
|
|
int show_xrefs = r_config_get_i (core->config, "asm.xrefs");
|
|
int show_functions = r_config_get_i (core->config, "asm.functions");
|
|
int cursor, nb, nbytes = r_config_get_i (core->config, "asm.nbytes");
|
|
int lbytes = r_config_get_i (core->config, "asm.lbytes");
|
|
int linesopts = 0;
|
|
int lastfail = 0;
|
|
const char *pre = " ";
|
|
|
|
nb = (nbytes*2);
|
|
core->inc = 0;
|
|
|
|
if (core->print->cur_enabled) {
|
|
if (core->print->cur<0)
|
|
core->print->cur = 0;
|
|
cursor = core->print->cur;
|
|
} else cursor = -1;
|
|
|
|
if (r_config_get_i (core->config, "asm.linesstyle"))
|
|
linesopts |= R_ANAL_REFLINE_TYPE_STYLE;
|
|
if (r_config_get_i (core->config, "asm.lineswide"))
|
|
linesopts |= R_ANAL_REFLINE_TYPE_WIDE;
|
|
|
|
// uhm... is this necesary? imho can be removed
|
|
r_asm_set_pc (core->assembler, addr);
|
|
#if 0
|
|
/* find last function else stackptr=0 */
|
|
{
|
|
RAnalFcn *fcni;
|
|
RListIter *iter;
|
|
|
|
r_list_foreach (core->anal.fcns, iter, fcni) {
|
|
if (addr >= fcni->addr && addr<(fcni->addr+fcni->size)) {
|
|
stack_ptr = fcni->stack;
|
|
r_cons_printf ("/* function: %s (%d) */\n", fcni->name, fcni->size, stack_ptr);
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
#endif
|
|
if (core->print->cur_enabled) {
|
|
// TODO: support in-the-middle-of-instruction too
|
|
if (r_anal_op (core->anal, &analop, core->offset+core->print->cur,
|
|
buf+core->print->cur, (int)(len-core->print->cur))) {
|
|
// TODO: check for analop.type and ret
|
|
dest = analop.jump;
|
|
#if 0
|
|
switch (analop.type) {
|
|
case R_ANAL_OP_TYPE_JMP:
|
|
case R_ANAL_OP_TYPE_CALL:
|
|
dest = analop.jump;
|
|
break;
|
|
}
|
|
#endif
|
|
}
|
|
}
|
|
// TODO: make anal->reflines implicit
|
|
free (core->reflines); // TODO: leak
|
|
free (core->reflines2); // TODO: leak
|
|
core->reflines = r_anal_reflines_get (core->anal, addr, buf, len, -1, linesout, show_linescall);
|
|
core->reflines2 = r_anal_reflines_get (core->anal, addr, buf, len, -1, linesout, 1);
|
|
for (lines=i=idx=ret=0; idx < len && lines < l; idx+=ret,i++, lines++) {
|
|
ut64 at = addr + idx;
|
|
r_asm_set_pc (core->assembler, at);
|
|
line = r_anal_reflines_str (core->anal, core->reflines, at, linesopts);
|
|
refline = filter_refline (line);
|
|
|
|
f = show_functions? r_anal_fcn_find (core->anal, at, R_ANAL_FCN_TYPE_NULL): NULL;
|
|
|
|
if (show_comments)
|
|
if ((comment = r_meta_get_string (core->anal->meta, R_META_TYPE_COMMENT, at))) {
|
|
if (show_color) r_cons_strcat (Color_TURQOISE);
|
|
r_cons_strcat_justify (comment, strlen (refline) + 5, ';');
|
|
if (show_color) r_cons_strcat (Color_RESET);
|
|
free (comment);
|
|
}
|
|
// TODO : line analysis must respect data types! shouldnt be interpreted as code
|
|
ret = r_asm_disassemble (core->assembler, &asmop, buf+idx, len-idx);
|
|
if (ret<1) {
|
|
ret = 1;
|
|
//eprintf ("** invalid opcode at 0x%08"PFMT64x" **\n",
|
|
// core->assembler->pc + ret);
|
|
lastfail = 1;
|
|
continue;
|
|
} else lastfail = 0;
|
|
if (core->inc == 0)
|
|
core->inc = ret;
|
|
r_anal_op (core->anal, &analop, at, buf+idx, (int)(len-idx));
|
|
{
|
|
RAnalValue *src;
|
|
switch (analop.type) {
|
|
case R_ANAL_OP_TYPE_MOV:
|
|
src = analop.src[0];
|
|
if (src && src->memref>0 && src->reg) {
|
|
if (core->anal->reg && core->anal->reg->name) {
|
|
const char *pc = core->anal->reg->name[R_REG_NAME_PC];
|
|
RAnalValue *dst = analop.dst;
|
|
if (!strcmp (src->reg->name, pc)) {
|
|
RFlagItem *item;
|
|
ut8 b[8];
|
|
ut64 ptr = idx+addr+src->delta+analop.length;
|
|
ut64 off = 0LL;
|
|
r_core_read_at (core, ptr, b, src->memref);
|
|
off = r_mem_get_num (b, src->memref, 1);
|
|
item = r_flag_get_i (core->flags, off);
|
|
r_cons_printf ("; MOV %s = [0x%"PFMT64x"] = 0x%"PFMT64x" %s\n",
|
|
dst->reg->name, ptr, off, item?item->name: "");
|
|
}
|
|
}
|
|
}
|
|
break;
|
|
case R_ANAL_OP_TYPE_LEA:
|
|
src = analop.src[0];
|
|
if (src && src->reg && core->anal->reg && core->anal->reg->name) {
|
|
const char *pc = core->anal->reg->name[R_REG_NAME_PC];
|
|
RAnalValue *dst = analop.dst;
|
|
if (dst && dst->reg && !strcmp (src->reg->name, pc)) {
|
|
r_cons_printf ("; %s = 0x%"PFMT64x"\n",
|
|
dst->reg->name,
|
|
idx+addr+src->delta);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
// Show xrefs
|
|
if (show_xrefs) {
|
|
RList *xrefs;
|
|
RAnalRef *refi;
|
|
RListIter *iter;
|
|
if ((xrefs = r_anal_xref_get (core->anal, at))) {
|
|
r_list_foreach (xrefs, iter, refi) {
|
|
RAnalFcn *fun = r_anal_fcn_find (core->anal, refi->addr, R_ANAL_FCN_TYPE_NULL);
|
|
r_cons_printf ("%s%s", pre, refline);
|
|
if (show_color)
|
|
r_cons_printf (Color_TURQOISE"; %s XREF 0x%08"PFMT64x" (%s)"Color_RESET"\n",
|
|
refi->type==R_ANAL_REF_TYPE_CODE?"CODE (JMP)":
|
|
refi->type==R_ANAL_REF_TYPE_CALL?"CODE (CALL)":"DATA", refi->addr,
|
|
fun?fun->name:"unk");
|
|
else r_cons_printf ("; %s XREF 0x%08"PFMT64x" (%s)\n",
|
|
refi->type==R_ANAL_REF_TYPE_CODE?"CODE (JMP)":
|
|
refi->type==R_ANAL_REF_TYPE_CALL?"CODE (CALL)":"DATA", refi->addr,
|
|
fun?fun->name:"unk");
|
|
}
|
|
r_list_destroy (xrefs);
|
|
}
|
|
}
|
|
if (adistrick)
|
|
middle = r_anal_reflines_middle (core->anal,
|
|
core->reflines, at, analop.length);
|
|
/* XXX: This is really cpu consuming.. need to be fixed */
|
|
if (show_functions) {
|
|
if (f) {
|
|
pre = " ";
|
|
if (f->addr == at) {
|
|
char *sign = r_anal_fcn_to_string (core->anal, f);
|
|
r_cons_printf ("/ %s: %s (%d)\n| ",
|
|
(f->type==R_ANAL_FCN_TYPE_FCN||f->type==R_ANAL_FCN_TYPE_SYM)?"function":
|
|
(f->type==R_ANAL_FCN_TYPE_IMP)?"import":"loc",
|
|
f->name, f->size);
|
|
if (sign) r_cons_printf ("// %s\n", sign);
|
|
free (sign);
|
|
pre = "| ";
|
|
stackptr = 0;
|
|
} else if (f->addr+f->size-1 == at) {
|
|
r_cons_printf ("\\ ");
|
|
} else if (at > f->addr && at < f->addr+f->size-1) {
|
|
r_cons_printf ("| ");
|
|
pre = "| ";
|
|
} else f = NULL;
|
|
} else r_cons_printf (" ");
|
|
}
|
|
flag = r_flag_get_i (core->flags, at);
|
|
//if (flag && !show_bytes) {
|
|
if (flag) {
|
|
if (show_lines && refline)
|
|
r_cons_strcat (refline);
|
|
if (show_offset)
|
|
printoffset (at, show_color);
|
|
if (show_functions)
|
|
r_cons_printf ("%s:\n%s", flag->name, f?"| ":" ");
|
|
else r_cons_printf ("%s:\n", flag->name);
|
|
}
|
|
if (show_lines && line)
|
|
r_cons_strcat (line);
|
|
if (show_offset) {
|
|
if (at == dest)
|
|
r_cons_invert (R_TRUE, R_TRUE);
|
|
printoffset (at, show_color);
|
|
if (at == dest)
|
|
r_cons_printf (Color_RESET);
|
|
}
|
|
if (show_trace) {
|
|
RDebugTracepoint *tp = r_debug_trace_get (core->dbg, at);
|
|
r_cons_printf ("%02x:%04x ", tp?tp->times:0, tp?tp->count:0);
|
|
}
|
|
if (show_stackptr) {
|
|
r_cons_printf ("%3d%s ", stackptr,
|
|
analop.type==R_ANAL_OP_TYPE_CALL?">":
|
|
stackptr>ostackptr?"+":stackptr<ostackptr?"-":" ");
|
|
ostackptr = stackptr;
|
|
stackptr += analop.stackptr;
|
|
/* XXX if we reset the stackptr 'ret 0x4' has not effect.
|
|
* Use RAnalFcn->RAnalOp->stackptr? */
|
|
if (analop.type == R_ANAL_OP_TYPE_RET)
|
|
stackptr = 0;
|
|
}
|
|
// TODO: implement ranged meta find (if not at the begging of function..
|
|
mi = r_meta_find (core->anal->meta, at, R_META_TYPE_ANY, R_META_WHERE_HERE);
|
|
if (mi)
|
|
switch (mi->type) {
|
|
case R_META_TYPE_STRING:
|
|
// TODO: filter string (r_str_unscape)
|
|
{
|
|
char *out = r_str_unscape (mi->str);
|
|
r_cons_printf ("string (%"PFMT64d"): \"%s\"\n", mi->size, out);
|
|
free (out);
|
|
}
|
|
ret = (int)mi->size;
|
|
free (line);
|
|
free (refline);
|
|
line = refline = NULL;
|
|
continue;
|
|
case R_META_TYPE_DATA:
|
|
{
|
|
int delta = at-mi->from;
|
|
core->print->flags &= ~R_PRINT_FLAGS_HEADER;
|
|
r_cons_printf ("hex length=%lld delta=%d\n", mi->size , delta);
|
|
r_print_hexdump (core->print, at, buf+idx, mi->size-delta, 16, 1);
|
|
core->inc = 16;
|
|
core->print->flags |= R_PRINT_FLAGS_HEADER;
|
|
ret = (int)mi->size; //-delta;
|
|
free (line);
|
|
free (refline);
|
|
line = refline = NULL;
|
|
}
|
|
continue;
|
|
case R_META_TYPE_FORMAT:
|
|
r_print_format (core->print, at, buf+idx, len-idx, mi->str);
|
|
ret = (int)mi->size;
|
|
free (line);
|
|
free (refline);
|
|
line = refline = NULL;
|
|
continue;
|
|
}
|
|
/* show cursor */
|
|
if (core->print->cur_enabled && cursor >= idx && cursor < (idx+asmop.inst_len))
|
|
r_cons_printf ("* ");
|
|
else r_cons_printf (" ");
|
|
if (show_bytes) {
|
|
char *str, pad[64];
|
|
char extra[64];
|
|
strcpy (extra, " ");
|
|
flag = NULL; // HACK
|
|
if (!flag) {
|
|
str = strdup (asmop.buf_hex);
|
|
if (r_str_ansi_len (str) > nb) {
|
|
char *p = (char *)r_str_ansi_chrn (str, nb);
|
|
if (p) {
|
|
p[0] = '.';
|
|
p[1] = '\0';
|
|
}
|
|
*extra = 0;
|
|
}
|
|
k = nb-r_str_ansi_len (str);
|
|
if (k<0) k = 0;
|
|
for (j=0; j<k; j++)
|
|
pad[j] = ' ';
|
|
pad[j] = 0;
|
|
if (lbytes) {
|
|
// hack to align bytes left
|
|
strcpy (extra, pad);
|
|
*pad = 0;
|
|
}
|
|
// if (show_color) {
|
|
char *nstr;
|
|
p->cur_enabled = cursor!=-1;
|
|
//p->cur = cursor;
|
|
nstr = r_print_hexpair (p, str, idx);
|
|
free (str);
|
|
str = nstr;
|
|
// }
|
|
} else {
|
|
str = strdup (flag->name);
|
|
k = nb-strlen (str)-2;
|
|
if (k<0) k = 0;
|
|
for (j=0; j<k; j++)
|
|
pad[j] = ' ';
|
|
pad[j] = '\0';
|
|
}
|
|
if (0) { // if (flag)
|
|
if (show_color)
|
|
r_cons_printf (Color_BWHITE"*[ %s%s] "Color_RESET, pad, str);
|
|
else r_cons_printf ("*[ %s%s] ", pad, str);
|
|
} else {
|
|
if (show_color)
|
|
r_cons_printf (" %s %s %s"Color_RESET, pad, str, extra);
|
|
else r_cons_printf (" %s %s %s", pad, str, extra);
|
|
}
|
|
if (!show_color) free (str);
|
|
}
|
|
|
|
if (show_color) {
|
|
switch (analop.type) {
|
|
case R_ANAL_OP_TYPE_NOP:
|
|
r_cons_printf (Color_BLUE);
|
|
break;
|
|
case R_ANAL_OP_TYPE_JMP:
|
|
case R_ANAL_OP_TYPE_CJMP:
|
|
case R_ANAL_OP_TYPE_UJMP:
|
|
r_cons_printf (Color_GREEN);
|
|
break;
|
|
case R_ANAL_OP_TYPE_CMP:
|
|
r_cons_printf (Color_BMAGENTA);
|
|
break;
|
|
case R_ANAL_OP_TYPE_UCALL:
|
|
case R_ANAL_OP_TYPE_CALL:
|
|
r_cons_printf (Color_BGREEN);
|
|
break;
|
|
case R_ANAL_OP_TYPE_SWI:
|
|
r_cons_printf (Color_MAGENTA);
|
|
break;
|
|
case R_ANAL_OP_TYPE_RET:
|
|
r_cons_printf (Color_RED);
|
|
break;
|
|
case R_ANAL_OP_TYPE_LOAD:
|
|
r_cons_printf (Color_YELLOW);
|
|
break;
|
|
case R_ANAL_OP_TYPE_STORE:
|
|
r_cons_printf (Color_BYELLOW);
|
|
break;
|
|
}
|
|
}
|
|
if (decode) {
|
|
// TODO: Use data from code analysis..not raw analop here
|
|
// if we want to get more information
|
|
opstr = r_anal_op_to_string (core->anal, &analop);
|
|
} else if (pseudo) {
|
|
r_parse_parse (core->parser, asmop.buf_asm, str);
|
|
opstr = str;
|
|
} else if (filter) {
|
|
r_parse_filter (core->parser, core->flags, asmop.buf_asm, str, sizeof (str));
|
|
opstr = str;
|
|
} else opstr = asmop.buf_asm;
|
|
if (varsub) {
|
|
RAnalFcn *f = r_anal_fcn_find (core->anal, at, R_ANAL_FCN_TYPE_NULL);
|
|
if (f) {
|
|
r_parse_varsub (core->parser, f, opstr, strsub, sizeof (strsub));
|
|
if (decode) free (opstr);
|
|
opstr = strsub;
|
|
}
|
|
}
|
|
r_cons_strcat (opstr);
|
|
if (decode && !varsub)
|
|
free (opstr);
|
|
if (show_color)
|
|
r_cons_strcat (Color_RESET);
|
|
if (show_dwarf) {
|
|
char *sl = r_bin_meta_get_source_line (core->bin, at);
|
|
int len = strlen (opstr);
|
|
if (len<30) len = 30-len;
|
|
if (sl) {
|
|
if ((!osl || (osl && strcmp (sl, osl)))) {
|
|
while (len--)
|
|
r_cons_strcat (" ");
|
|
if (show_color)
|
|
r_cons_printf (Color_TURQOISE" ; %s"Color_RESET"%s", sl, pre);
|
|
else r_cons_printf (" ; %s\n%s", sl, pre);
|
|
free (osl);
|
|
osl = sl;
|
|
}
|
|
} else {
|
|
eprintf ("Warning: Forced asm.dwarf=false because of error\n");
|
|
show_dwarf = R_FALSE;
|
|
r_config_set (core->config, "asm.dwarf", "false");
|
|
}
|
|
}
|
|
if (middle != 0) {
|
|
ret -= middle;
|
|
r_cons_printf (" ; *middle* %d", ret);
|
|
}
|
|
if (core->assembler->syntax != R_ASM_SYNTAX_INTEL) {
|
|
RAsmOp ao; /* disassemble for the vm .. */
|
|
int os = core->assembler->syntax;
|
|
r_asm_set_syntax (core->assembler, R_ASM_SYNTAX_INTEL);
|
|
ret = r_asm_disassemble (core->assembler, &ao, buf+idx, len-idx);
|
|
r_asm_set_syntax (core->assembler, os);
|
|
}
|
|
|
|
if (!r_anal_cc_update (core->anal, &cc, &analop)) {
|
|
if (show_functions) {
|
|
char *ccstr = r_anal_cc_to_string (core->anal, &cc);
|
|
if (show_color) r_cons_printf ("\n%s%s "Color_TURQOISE"; %s"Color_RESET, pre, refline, ccstr);
|
|
else r_cons_printf ("\n%s%s ; %s", pre, refline, ccstr);
|
|
free (ccstr);
|
|
}
|
|
r_anal_cc_reset (&cc);
|
|
}
|
|
|
|
switch (analop.type) {
|
|
case R_ANAL_OP_TYPE_JMP:
|
|
case R_ANAL_OP_TYPE_CJMP:
|
|
case R_ANAL_OP_TYPE_CALL:
|
|
counter++;
|
|
if (counter<10){
|
|
core->asmqjmps[counter] = analop.jump;
|
|
r_cons_printf (" [%d]", counter);
|
|
} else r_cons_strcat (" [?]");
|
|
break;
|
|
}
|
|
|
|
if (analop.refptr) {
|
|
ut32 word = 0;
|
|
int ret = r_io_read_at (core->io, analop.ref, (void *)&word, sizeof (word));
|
|
if (ret == sizeof (word)) {
|
|
RMetaItem *mi2 = r_meta_find (core->anal->meta, (ut64)word,
|
|
R_META_TYPE_ANY, R_META_WHERE_HERE);
|
|
if (!mi2) {
|
|
mi2 = r_meta_find (core->anal->meta, (ut64)analop.ref,
|
|
R_META_TYPE_ANY, R_META_WHERE_HERE);
|
|
if (mi2) {
|
|
char *str = r_str_unscape (mi2->str);
|
|
r_cons_printf (" (at=0x%08"PFMT64x") (len=%"PFMT64d") \"%s\" ", analop.ref, mi2->size, str);
|
|
free (str);
|
|
} else r_cons_printf ("; => 0x%08x ", word);
|
|
} else {
|
|
if (mi2->type == R_META_TYPE_STRING) {
|
|
char *str = r_str_unscape (mi2->str);
|
|
r_cons_printf (" (at=0x%08x) (len=%"PFMT64d") \"%s\" ", word, mi2->size, str);
|
|
free (str);
|
|
} else r_cons_printf ("unknown type '%c'\n", mi2->type);
|
|
}
|
|
} else r_cons_printf ("; err [0x%"PFMT64x"]", analop.ref);
|
|
}
|
|
r_cons_newline ();
|
|
if (line) {
|
|
if (show_lines && analop.type == R_ANAL_OP_TYPE_RET) {
|
|
if (strchr (line, '>'))
|
|
memset (line, ' ', strlen (line));
|
|
r_cons_printf ("%s%s; ------------\n", show_functions?" ":"", line);
|
|
}
|
|
free (line);
|
|
free (refline);
|
|
line = refline = NULL;
|
|
}
|
|
}
|
|
free (osl);
|
|
return idx-lastfail;
|
|
}
|