mirror of
https://github.com/radareorg/radare2.git
synced 2024-12-11 23:16:05 +00:00
323 lines
8.4 KiB
C
323 lines
8.4 KiB
C
/* radare - LGPL - Copyright 2009-2012 - pancake */
|
|
|
|
R_API void r_core_cmpwatch_free (RCoreCmpWatcher *w) {
|
|
free (w->ndata);
|
|
free (w->odata);
|
|
free (w);
|
|
}
|
|
|
|
R_API RCoreCmpWatcher* r_core_cmpwatch_get(RCore *core, ut64 addr) {
|
|
RListIter *iter;
|
|
RCoreCmpWatcher *w;
|
|
r_list_foreach (core->watchers, iter, w) {
|
|
if (addr == w->addr)
|
|
return w;
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
R_API int r_core_cmpwatch_add (RCore *core, ut64 addr, int size, const char *cmd) {
|
|
RCoreCmpWatcher *cmpw;
|
|
if (size<1) return R_FALSE;
|
|
cmpw = r_core_cmpwatch_get (core, addr);
|
|
if (!cmpw) {
|
|
cmpw = R_NEW (RCoreCmpWatcher);
|
|
cmpw->addr = addr;
|
|
}
|
|
cmpw->size = size;
|
|
strncpy (cmpw->cmd, cmd, sizeof (cmpw->cmd));
|
|
cmpw->odata = NULL;
|
|
cmpw->ndata = malloc (size);
|
|
r_io_read_at (core->io, addr, cmpw->ndata, size);
|
|
r_list_append (core->watchers, cmpw);
|
|
return R_TRUE;
|
|
}
|
|
|
|
R_API int r_core_cmpwatch_del (RCore *core, ut64 addr) {
|
|
int ret = R_FALSE;
|
|
RCoreCmpWatcher *w;
|
|
RListIter *iter, *iter2;
|
|
r_list_foreach_safe (core->watchers, iter, iter2, w) {
|
|
if (w->addr == addr || addr == UT64_MAX) {
|
|
r_list_delete (core->watchers, iter);
|
|
ret = R_TRUE;
|
|
}
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
R_API int r_core_cmpwatch_show (RCore *core, ut64 addr, int mode) {
|
|
char cmd[128];
|
|
RListIter *iter;
|
|
RCoreCmpWatcher *w;
|
|
r_list_foreach (core->watchers, iter, w) {
|
|
int is_diff = w->odata? memcmp (w->odata, w->ndata, w->size): 0;
|
|
switch (mode) {
|
|
case '*':
|
|
r_cons_printf ("cw 0x%08"PFMT64x" %d %s%s\n",
|
|
w->addr, w->size, w->cmd, is_diff? " # differs":"");
|
|
break;
|
|
case 'd': // diff
|
|
if (is_diff)
|
|
r_cons_printf ("0x%08"PFMT64x" has changed\n", w->addr);
|
|
case 'o': // old contents
|
|
// use tmpblocksize
|
|
default:
|
|
r_cons_printf ("0x%08"PFMT64x"%s\n", w->addr, is_diff? " modified":"");
|
|
snprintf (cmd, sizeof (cmd), "%s@%"PFMT64d"!%d",
|
|
w->cmd, w->addr, w->size);
|
|
r_core_cmd0 (core, cmd);
|
|
break;
|
|
}
|
|
}
|
|
return R_FALSE;
|
|
}
|
|
|
|
R_API int r_core_cmpwatch_update (RCore *core, ut64 addr) {
|
|
RCoreCmpWatcher *w;
|
|
RListIter *iter;
|
|
r_list_foreach (core->watchers, iter, w) {
|
|
free (w->odata);
|
|
w->odata = w->ndata;
|
|
w->ndata = malloc (w->size);
|
|
r_io_read_at (core->io, w->addr, w->ndata, w->size);
|
|
}
|
|
return !r_list_empty (core->watchers);
|
|
}
|
|
|
|
R_API int r_core_cmpwatch_revert (RCore *core, ut64 addr) {
|
|
RCoreCmpWatcher *w;
|
|
int ret = R_FALSE;
|
|
RListIter *iter;
|
|
r_list_foreach (core->watchers, iter, w) {
|
|
if (w->addr == addr || addr == UT64_MAX) {
|
|
if (w->odata) {
|
|
free (w->ndata);
|
|
w->ndata = w->odata;
|
|
w->odata = NULL;
|
|
ret = R_TRUE;
|
|
}
|
|
}
|
|
}
|
|
return ret;
|
|
}
|
|
/** **/
|
|
|
|
static int radare_compare(RCore *core, const ut8 *f, const ut8 *d, int len) {
|
|
int i, eq = 0;
|
|
for (i=0; i<len; i++) {
|
|
if (f[i]==d[i]) {
|
|
eq++;
|
|
continue;
|
|
}
|
|
r_cons_printf ("0x%08"PFMT64x" (byte=%.2d) %02x '%c' -> %02x '%c'\n",
|
|
core->offset+i, i+1,
|
|
f[i], (IS_PRINTABLE(f[i]))?f[i]:' ',
|
|
d[i], (IS_PRINTABLE(d[i]))?d[i]:' ');
|
|
}
|
|
eprintf ("Compare %d/%d equal bytes\n", eq, len);
|
|
return len-eq;
|
|
}
|
|
|
|
static void cmd_cmp_watcher (RCore *core, const char *input) {
|
|
char *p, *q, *r = NULL;
|
|
int size = 0;
|
|
ut64 addr = 0;
|
|
switch (*input) {
|
|
case ' ':
|
|
p = strdup (input+1);
|
|
q = strchr (p, ' ');
|
|
if (q) {
|
|
*q++ = 0;
|
|
addr = r_num_math (core->num, p);
|
|
r = strchr (q, ' ');
|
|
if (r) {
|
|
*r++ = 0;
|
|
size = atoi (q);
|
|
}
|
|
r_core_cmpwatch_add (core, addr, size, r);
|
|
//eprintf ("ADD (%llx) %d (%s)\n", addr, size, r);
|
|
} else eprintf ("Missing parameters\n");
|
|
free (p);
|
|
break;
|
|
case 'r':
|
|
addr = input[1]? r_num_math (core->num, input+1): UT64_MAX;
|
|
r_core_cmpwatch_revert (core, addr);
|
|
break;
|
|
case 'u':
|
|
addr = input[1]? r_num_math (core->num, input+1): UT64_MAX;
|
|
r_core_cmpwatch_update (core, addr);
|
|
break;
|
|
case '*':
|
|
r_core_cmpwatch_show (core, UT64_MAX, '*');
|
|
break;
|
|
case '\0':
|
|
r_core_cmpwatch_show (core, UT64_MAX, 0);
|
|
break;
|
|
case '?':
|
|
r_cons_printf (
|
|
"Usage: cw[?] [...]\n"
|
|
" cw list all compare watchers\n"
|
|
" cw* list compare watchers in r2 cmds\n"
|
|
" cw addr list all compare watchers\n"
|
|
" cw addr sz cmd add a memory watcher\n"
|
|
//" cws [addr] show watchers\n"
|
|
" cwu [addr] update watchers\n"
|
|
" cwr [addr] reset/revert watchers\n"
|
|
);
|
|
break;
|
|
}
|
|
}
|
|
|
|
static int cmd_cmp(void *data, const char *input) {
|
|
RCore *core = data;
|
|
FILE *fd;
|
|
ut8 *buf;
|
|
int ret;
|
|
ut32 v32;
|
|
ut64 v64;
|
|
|
|
switch (*input) {
|
|
case 'w':
|
|
cmd_cmp_watcher (core, input+1);
|
|
break;
|
|
case ' ':
|
|
radare_compare (core, core->block, (ut8*)input+1, strlen (input+1)+1);
|
|
break;
|
|
case 'x':
|
|
if (input[1]!=' ') {
|
|
eprintf ("Usage: cx 001122'\n");
|
|
return 0;
|
|
}
|
|
buf = (ut8*)malloc (strlen (input+2));
|
|
ret = r_hex_str2bin (input+2, buf);
|
|
if (ret<1) eprintf ("Cannot parse hexpair\n");
|
|
else radare_compare (core, core->block, buf, ret);
|
|
free (buf);
|
|
break;
|
|
case 'X':
|
|
buf = malloc (core->blocksize);
|
|
ret = r_io_read_at (core->io, r_num_math (core->num, input+1), buf, core->blocksize);
|
|
radare_compare (core, core->block, buf, ret);
|
|
free (buf);
|
|
break;
|
|
case 'f':
|
|
if (input[1]!=' ') {
|
|
eprintf ("Please. use 'cf [file]'\n");
|
|
return 0;
|
|
}
|
|
fd = r_sandbox_fopen (input+2, "rb");
|
|
if (fd == NULL) {
|
|
eprintf ("Cannot open file '%s'\n", input+2);
|
|
return 0;
|
|
}
|
|
buf = (ut8 *)malloc (core->blocksize);
|
|
fread (buf, 1, core->blocksize, fd);
|
|
fclose (fd);
|
|
radare_compare (core, core->block, buf, core->blocksize);
|
|
free (buf);
|
|
break;
|
|
case 'q':
|
|
v64 = (ut64) r_num_math (core->num, input+1);
|
|
radare_compare (core, core->block, (ut8*)&v64, sizeof (v64));
|
|
break;
|
|
case 'd':
|
|
v32 = (ut32) r_num_math (core->num, input+1);
|
|
radare_compare (core, core->block, (ut8*)&v32, sizeof (v32));
|
|
break;
|
|
#if 0
|
|
case 'c':
|
|
radare_compare_code (
|
|
r_num_math (core->num, input+1),
|
|
core->block, core->blocksize);
|
|
break;
|
|
case 'D':
|
|
{ // XXX ugly hack
|
|
char cmd[1024];
|
|
sprintf (cmd, "radiff -b %s %s", ".curblock", input+2);
|
|
r_file_dump (".curblock", config.block, config.block_size);
|
|
radare_system(cmd);
|
|
unlink(".curblock");
|
|
}
|
|
break;
|
|
#endif
|
|
case 'c':
|
|
{
|
|
int col = core->cons->columns>123;
|
|
ut8 *b = malloc (core->blocksize);
|
|
ut64 addr = r_num_math (core->num, input+2);
|
|
if (!b) return 0;
|
|
memset (b, 0xff, core->blocksize);
|
|
r_core_read_at (core, addr, b, core->blocksize);
|
|
#if 0
|
|
r_io_seek (core->io, addr, R_IO_SEEK_SET);
|
|
r_io_read (core->io, b, core->blocksize);
|
|
#endif
|
|
r_print_hexdiff (core->print, core->offset, core->block, addr, b, core->blocksize, col);
|
|
free (b);
|
|
}
|
|
break;
|
|
case 'g':
|
|
{ // XXX: this is broken
|
|
int diffops = 0;
|
|
RCore *core2;
|
|
char *file2 = NULL;
|
|
if (input[1]=='o') {
|
|
file2 = (char*)r_str_chop_ro (input+2);
|
|
r_anal_diff_setup (core->anal, R_TRUE, -1, -1);
|
|
} else
|
|
if (input[1]==' ') {
|
|
file2 = (char*)r_str_chop_ro (input+2);
|
|
r_anal_diff_setup (core->anal, R_FALSE, -1, -1);
|
|
} else {
|
|
eprintf ("Usage: cg[o] [file]\n");
|
|
eprintf (" cg - byte-per-byte code graph diff\n");
|
|
eprintf (" cgo - opcode-bytes code graph diff\n");
|
|
return R_FALSE;
|
|
}
|
|
|
|
if (!(core2 = r_core_new ())) {
|
|
eprintf ("Cannot init diff core\n");
|
|
return R_FALSE;
|
|
}
|
|
core2->io->va = core->io->va;
|
|
core2->anal->split = core->anal->split;
|
|
if (!r_core_file_open (core2, file2, 0, 0LL)) {
|
|
eprintf ("Cannot open diff file '%s'\n", file2);
|
|
r_core_free (core2);
|
|
return R_FALSE;
|
|
}
|
|
// TODO: must replicate on core1 too
|
|
r_config_set_i (core2->config, "io.va", R_TRUE);
|
|
r_config_set_i (core2->config, "anal.split", R_TRUE);
|
|
r_anal_diff_setup (core->anal, diffops, -1, -1);
|
|
r_anal_diff_setup (core2->anal, diffops, -1, -1);
|
|
|
|
r_core_bin_load (core2, file2);
|
|
r_core_gdiff (core, core2);
|
|
r_core_diff_show (core, core2);
|
|
r_core_free (core2);
|
|
}
|
|
break;
|
|
case '?':
|
|
r_cons_strcat (
|
|
"Usage: c[?cdfx] [argument]\n"
|
|
" c [string] Compares a plain with escaped chars string\n"
|
|
" cc [at] [(at)] Compares in two hexdump columns of block size\n"
|
|
//" cc [offset] Code bindiff current block against offset\n"
|
|
" cd [value] Compare a doubleword from a math expression\n"
|
|
//" cD [file] Like above, but using radiff -b\n");
|
|
" cq [value] Compare a quadword from a math expression\n"
|
|
" cx [hexpair] Compare hexpair string\n"
|
|
" cX [addr] Like 'cc' but using hexdiff output\n"
|
|
" cf [file] Compare contents of file at current seek\n"
|
|
" cg[o] [file] Graphdiff current file and [file]\n"
|
|
" cw[us?] [...] Compare memory watchers\n");
|
|
break;
|
|
default:
|
|
eprintf ("Usage: c[?cDdxfw] [argument]\n");
|
|
}
|
|
return 0;
|
|
}
|
|
|