Exemple #1
0
        public void Add(string name, ulong vaddr, ulong offset, ulong size, Elf64Reader.ElfHeader r)
        {
            Symbol s = new Symbol {
                Name = name, vaddr = vaddr, offset = offset, r = r, size = size
            };

            if (name.StartsWith("_A"))
            {
                AssemblySymbols.Add(name, s);
            }
            Symbols.Add(name, s);
            if (!SymbolsFromVaddr.ContainsKey(s.vaddr))
            {
                SymbolsFromVaddr.Add(s.vaddr, s);
            }
        }
Exemple #2
0
        public static object ReadReference(ulong vaddr, Elf64Reader.ElfHeader ehdr)
        {
            // Try and read the vaddr as a reference
            long old_pos = ehdr.r.BaseStream.Position;

            try
            {
                ulong  file_offset = ehdr.VaddrToOffset(vaddr);
                ulong  vt          = ehdr.ReadPointer(file_offset);
                string vt_name     = ehdr.stab.GetSymbolName(vt);

                foreach (ObjectToName otn in obj_to_name)
                {
                    if (otn.VTName == vt_name)
                    {
                        Reference ret = new Reference();
                        ret.Address     = vaddr;
                        ret.file_offset = file_offset;
                        ret.Type        = vt_name;

                        //ulong ti_vaddr = ehdr.ReadPointer(ehdr.VaddrToOffset(vt));
                        MetadataObject r = ReadVaddr(vaddr, ehdr, false);
                        ret.Name = ParseName(r, otn.NameExp);

                        return(ret);
                    }
                }

                return(vaddr);
            }
            catch (ParseException)
            {
                throw;
            }
            catch (Exception)
            {
                return(vaddr);
            }
            finally
            {
                ehdr.r.BaseStream.Seek(old_pos, System.IO.SeekOrigin.Begin);
            }
        }
Exemple #3
0
        public static MetadataObject ReadVaddr(ulong vaddr, Elf64Reader.ElfHeader ehdr, bool read_references)
        {
            if (cache.ContainsKey(vaddr))
            {
                return(cache[vaddr]);
            }

            MetadataObject ret = new MetadataObject();

            ret.Address     = vaddr;
            ret.ehdr        = ehdr;
            ret.file_offset = ehdr.VaddrToOffset(vaddr);
            ret.Read(read_references);

            if (read_references)
            {
                cache[vaddr] = ret;
            }
            return(ret);
        }
Exemple #4
0
        private object ReadFieldData(CMExpLib.Layout.Field f, ulong file_offset, Elf64Reader.ElfHeader ehdr, bool read_references)
        {
            long   old_pos = ehdr.r.BaseStream.Position;
            object ret     = null;
            bool   is_obj  = false;

            ehdr.r.BaseStream.Seek((long)file_offset + (long)f.Offset, System.IO.SeekOrigin.Begin);
            if (f.ftype == CMExpLib.Layout.Field.FType.Value)
            {
                if (f.FieldType == null)
                {
                    // It's an unknown field type, load it as a signed integer
                    switch (f.Length)
                    {
                    case 1:
                        ret = ehdr.r.ReadSByte();
                        break;

                    case 2:
                        ret = ehdr.r.ReadInt16();
                        break;

                    case 4:
                        ret    = ehdr.r.ReadInt32();
                        is_obj = true;
                        break;

                    case 8:
                        ret    = ehdr.r.ReadInt64();
                        is_obj = true;
                        break;

                    default:
                        ret = ehdr.r.ReadBytes(f.Length);
                        break;
                    }
                }
                else
                {
                    if (f.FieldType == "I")
                    {
                        ret    = ehdr.ReadPointer((ulong)ehdr.r.BaseStream.Position);
                        is_obj = true;
                    }
                    else if (f.FieldType == "U")
                    {
                        ret    = ehdr.ReadPointer((ulong)ehdr.r.BaseStream.Position);
                        is_obj = true;
                    }
                    else if (f.FieldType == "I1")
                    {
                        ret = ehdr.r.ReadSByte();
                    }
                    else if (f.FieldType == "I2")
                    {
                        ret = ehdr.r.ReadInt16();
                    }
                    else if (f.FieldType == "I4")
                    {
                        ret = ehdr.r.ReadInt32();
                    }
                    else if (f.FieldType == "I8")
                    {
                        ret = ehdr.r.ReadInt64();
                    }
                    else if (f.FieldType == "U1")
                    {
                        ret = ehdr.r.ReadByte();
                    }
                    else if (f.FieldType == "U2")
                    {
                        ret = ehdr.r.ReadUInt16();
                    }
                    else if (f.FieldType == "U4")
                    {
                        ret = ehdr.r.ReadUInt32();
                    }
                    else if (f.FieldType == "U8")
                    {
                        ret = ehdr.r.ReadUInt64();
                    }
                    else if (f.FieldType == "Boolean")
                    {
                        if (ehdr.r.ReadByte() == 0)
                        {
                            ret = false;
                        }
                        ret = true;
                    }
                    else if (f.FieldType == "Char")
                    {
                        ret = (char)ehdr.r.ReadUInt16();
                    }
                    else if (f.FieldType == "R4")
                    {
                        ret = ehdr.r.ReadSingle();
                    }
                    else if (f.FieldType == "R8")
                    {
                        ret = ehdr.r.ReadDouble();
                    }
                    else if (f.FieldType == "String")
                    {
                        ulong str_ptr    = ehdr.ReadPointer((ulong)ehdr.r.BaseStream.Position);
                        ulong str_offset = ehdr.VaddrToOffset(str_ptr);

                        ehdr.r.BaseStream.Seek((long)str_offset + (long)ehdr.stab.ass.GetStringFieldOffset(libtysila.Assembler.StringFields.length), System.IO.SeekOrigin.Begin);
                        int str_len = ehdr.r.ReadInt32();
                        ehdr.r.BaseStream.Seek((long)str_offset + (long)ehdr.stab.ass.GetStringFieldOffset(libtysila.Assembler.StringFields.data_offset), System.IO.SeekOrigin.Begin);
                        byte[] str_data = ehdr.r.ReadBytes(str_len * 2);
                        ret = Encoding.Unicode.GetString(str_data);
                    }
                    else
                    {
                        // It's an unknown field type, load it as a signed integer
                        switch (f.Length)
                        {
                        case 1:
                            ret = ehdr.r.ReadSByte();
                            break;

                        case 2:
                            ret = ehdr.r.ReadInt16();
                            break;

                        case 4:
                            ret    = ehdr.r.ReadInt32();
                            is_obj = true;
                            break;

                        case 8:
                            ret    = ehdr.r.ReadInt64();
                            is_obj = true;
                            break;

                        default:
                            ret = ehdr.r.ReadBytes(f.Length);
                            break;
                        }
                    }
                }
            }
            else if (f.ftype == CMExpLib.Layout.Field.FType.NTArray)
            {
                ulong list_vaddr = ehdr.ReadPointer();
                if (list_vaddr == 0)
                {
                    return new object[] {}
                }
                ;

                ulong list_offset = ehdr.VaddrToOffset(list_vaddr);
                ehdr.r.BaseStream.Seek((long)list_offset, System.IO.SeekOrigin.Begin);

                ulong         cur_item;
                List <object> items = new List <object>();

                do
                {
                    cur_item = ehdr.ReadPointer();

                    if (cur_item != 0)
                    {
                        if (read_references)
                        {
                            items.Add(ReadReference(cur_item, ehdr));
                        }
                        else
                        {
                            items.Add(cur_item);
                        }
                        // The Interfaces list in TysosType is special in that each item is interspersed
                        //  with the pointer to the vtable for that interface
                        if ((f.l.Name == "_ZX9TysosTypeTI") && (f.Name == "Interfaces"))
                        {
                            ehdr.ReadPointer();
                        }
                    }
                } while (cur_item != 0);
                ret = items.ToArray();
            }

            if (is_obj && read_references)
            {
                ret = ReadReference(Convert.ToUInt64(ret), ehdr);
            }

            ehdr.r.BaseStream.Seek(old_pos, System.IO.SeekOrigin.Begin);

            return(ret);
        }
Exemple #5
0
 private object ReadFieldData(CMExpLib.Layout.Field f, ulong file_offset, Elf64Reader.ElfHeader ehdr)
 {
     return(ReadFieldData(f, file_offset, ehdr, true));
 }
Exemple #6
0
 public static MetadataObject ReadVaddr(ulong vaddr, Elf64Reader.ElfHeader ehdr)
 {
     return(ReadVaddr(vaddr, ehdr, true));
 }