Added support for Android boot images.

20 files changed, 1932 insertions, 1 deletions

diff --git a/plugins/Makefile.am b/plugins/Makefile.am
index 785a1ed..ecdc018 100644
--- a/plugins/Makefile.am
+++ b/plugins/Makefile.am
@@ -6,4 +6,4 @@ PYTHON3_SUBDIRS = pychrysalide python
 endif
 
 # androhelpers
-SUBDIRS = $(PYTHON3_SUBDIRS) arm dex dalvik devdbg dexbnf dwarf elf fmtp itanium javadesc libcsem lnxsyscalls mobicore readdex readelf readmc ropgadgets
+SUBDIRS = $(PYTHON3_SUBDIRS) arm bootimg dex dalvik devdbg dexbnf dwarf elf fmtp itanium javadesc libcsem lnxsyscalls mobicore readdex readelf readmc ropgadgets
diff --git a/plugins/bootimg/Makefile.am b/plugins/bootimg/Makefile.am
new file mode 100644
index 0000000..8329665
--- /dev/null
+++ b/plugins/bootimg/Makefile.am
@@ -0,0 +1,51 @@
+
+lib_LTLIBRARIES = libbootimg.la
+
+libdir = $(pluginslibdir)
+
+
+if BUILD_PYTHON3_BINDINGS
+
+PYTHON3_LIBADD = python/libbootimgpython.la
+
+if BUILD_DISCARD_LOCAL
+
+PYTHON3_LDFLAGS = -Wl,-rpath,$(pluginslibdir) \
+					-L$(top_srcdir)/plugins/pychrysalide/.libs -l:pychrysalide.so
+
+else
+
+PYTHON3_LDFLAGS = -Wl,-rpath,$(abs_top_srcdir)/plugins/pychrysalide/.libs \
+					-L$(top_srcdir)/plugins/pychrysalide/.libs -l:pychrysalide.so
+
+endif
+
+PYTHON3_SUBDIRS = python
+
+endif
+
+
+libbootimg_la_SOURCES =					\
+	core.h core.c						\
+	bootimg-def.h						\
+	format-int.h format-int.c			\
+	format.h format.c
+
+libbootimg_la_LIBADD =					\
+	$(PYTHON3_LIBADD)
+
+libbootimg_la_LDFLAGS =							\
+	-L$(top_srcdir)/src/.libs -lchrysacore		\
+	$(PYTHON3_LDFLAGS)
+
+
+devdir = $(includedir)/chrysalide-$(subdir)
+
+dev_HEADERS = $(libbootimg_la_SOURCES:%c=)
+
+
+AM_CPPFLAGS = $(LIBGTK_CFLAGS) $(LIBXML_CFLAGS) -I$(top_srcdir)/src
+
+AM_CFLAGS = $(DEBUG_CFLAGS) $(WARNING_FLAGS) $(COMPLIANCE_FLAGS)
+
+SUBDIRS = $(PYTHON3_SUBDIRS)
diff --git a/plugins/bootimg/bootimg-def.h b/plugins/bootimg/bootimg-def.h
new file mode 100644
index 0000000..90fb97a
--- /dev/null
+++ b/plugins/bootimg/bootimg-def.h
@@ -0,0 +1,78 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * elf_def.h - liste des structures et constantes utilisées par le format BOOT.img
+ *
+ * Copyright (C) 2019 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with Chrysalide.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#ifndef _PLUGINS_BOOTIMG_BOOTIMG_DEF_H
+#define _PLUGINS_BOOTIMG_BOOTIMG_DEF_H
+
+
+#include <stdint.h>
+
+
+
+/**
+ * Références :
+ *
+ *   - https://source.android.com/devices/bootloader/boot-image-header
+ *   - https://android.googlesource.com/platform/system/core/+/android-4.4_r1/mkbootimg/bootimg.h
+ */
+
+
+#define BOOT_MAGIC "ANDROID!"
+#define BOOT_MAGIC_SIZE (sizeof(BOOT_MAGIC) - 1)
+
+#define BOOT_NAME_SIZE       16
+#define BOOT_ARGS_SIZE       512
+#define BOOT_EXTRA_ARGS_SIZE 1024
+
+
+/* Entêtes, ancienne et nouvelle, pour une image de démarrage Android */
+typedef struct _boot_img_hdr
+{
+    uint8_t magic[BOOT_MAGIC_SIZE];         /* Identifiant magique         */
+    uint32_t kernel_size;                   /* Taille en octets            */
+    uint32_t kernel_addr;                   /* Adresse de chargement phys. */
+
+    uint32_t ramdisk_size;                  /* Taille en octets            */
+    uint32_t ramdisk_addr;                  /* Adresse de chargement phys. */
+
+    uint32_t second_size;                   /* Taille en octets            */
+    uint32_t second_addr;                   /* Adresse de chargement phys. */
+
+    uint32_t tags_addr;                     /* Adresse de chargement phys. */
+    uint32_t page_size;                     /* Taille des pages de Flash   */
+    uint32_t header_version;                /* Version de cet entête       */
+    uint32_t os_version;                    /* Version de l'OS             */
+    uint8_t name[BOOT_NAME_SIZE];           /* Désignation ASCII du produit*/
+    uint8_t cmdline[BOOT_ARGS_SIZE];        /* Arguments de démarrage      */
+    uint32_t id[8];                         /* Horodatage, empreinte, etc. */
+    uint8_t extra_cmdline[BOOT_EXTRA_ARGS_SIZE]; /* Arg. supplémentaires   */
+
+    uint32_t recovery_dtbo_size;            /* Taille de l'image DTBO      */
+    uint64_t recovery_dtbo_offset;          /* Emplacement dans le contenu */
+    uint32_t header_size;                   /* Taille de l'entête en octets*/
+
+} boot_img_hdr;
+
+
+
+#endif  /* _PLUGINS_BOOTIMG_BOOTIMG_DEF_H */
diff --git a/plugins/bootimg/core.c b/plugins/bootimg/core.c
new file mode 100644
index 0000000..fdf1c95
--- /dev/null
+++ b/plugins/bootimg/core.c
@@ -0,0 +1,131 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * core.c - intégration du support du format BOOT.img
+ *
+ * Copyright (C) 2019 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with Chrysalide.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#include "core.h"
+
+
+#include <config.h>
+#include <core/global.h>
+#include <plugins/plugin-def.h>
+
+
+#include "format.h"
+#ifdef HAVE_PYTHON3_BINDINGS
+#   include "python/module.h"
+#endif
+
+
+#ifdef HAVE_PYTHON3_BINDINGS
+#   define PG_REQ RL("PyChrysalide")
+#else
+#   define PG_REQ NO_REQ
+#endif
+
+
+
+DEFINE_CHRYSALIDE_PLUGIN("GBootImgPlugin", "bootimg", "Add support for the BOOT.img format", "0.1.0",
+                         PG_REQ, AL(PGA_PLUGIN_INIT, PGA_CONTENT_EXPLORER));
+
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : plugin = greffon à manipuler.                                *
+*                                                                             *
+*  Description : Prend acte du chargement du greffon.                         *
+*                                                                             *
+*  Retour      : -                                                            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+G_MODULE_EXPORT bool chrysalide_plugin_init(GPluginModule *plugin)
+{
+    bool result;                            /* Bilan à retourner           */
+
+#ifdef HAVE_PYTHON3_BINDINGS
+    result = add_format_bootimg_module_to_python_module();
+#else
+    result = true;
+#endif
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : plugin  = greffon à manipuler.                               *
+*                action  = type d'action attendue.                            *
+*                content = contenu binaire à traiter.                         *
+*                wid     = identifiant du groupe de traitement.               *
+*                status  = barre de statut à tenir informée.                  *
+*                                                                             *
+*  Description : Procède à une opération liée à un contenu binaire.           *
+*                                                                             *
+*  Retour      : -                                                            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+G_MODULE_EXPORT void chrysalide_plugin_handle_binary_content(const GPluginModule *plugin, PluginAction action, GBinContent *content, wgroup_id_t wid, GtkStatusStack *status)
+{
+    bool test;                              /* Bilan des accès mémoire     */
+    GContentExplorer *explorer;             /* Explorateur de contenus     */
+    GBootImgFormat *format;                 /* Encapsulation reconnue      */
+    GBinContent *embedded;                  /* Nouveau contenu détecté     */
+
+    test = check_bootimg_format(content);
+
+    if (test)
+    {
+        explorer = get_current_content_explorer();
+
+        format = g_bootimg_format_new(content);
+
+        test = g_known_format_analyze(G_KNOWN_FORMAT(format), wid, status);
+
+        if (test)
+        {
+            embedded = g_bootimg_format_get_kernel(format);
+
+            if (embedded != NULL)
+                g_content_explorer_populate_group(explorer, wid, embedded);
+
+            embedded = g_bootimg_format_get_ramdisk(format);
+
+            if (embedded != NULL)
+                g_content_explorer_populate_group(explorer, wid, embedded);
+
+        }
+
+        g_object_unref(G_OBJECT(format));
+
+        g_object_unref(G_OBJECT(explorer));
+
+    }
+
+}
diff --git a/plugins/bootimg/core.h b/plugins/bootimg/core.h
new file mode 100644
index 0000000..606f5b0
--- /dev/null
+++ b/plugins/bootimg/core.h
@@ -0,0 +1,41 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * core.h - prototypes pour l'intégration du support du format BOOT.img
+ *
+ * Copyright (C) 2019 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with Chrysalide.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#ifndef _PLUGINS_BOOTIMG_CORE_H
+#define _PLUGINS_BOOTIMG_CORE_H
+
+
+#include <plugins/plugin.h>
+#include <plugins/plugin-int.h>
+
+
+
+/* Prend acte du chargement du greffon. */
+G_MODULE_EXPORT bool chrysalide_plugin_init(GPluginModule *);
+
+/* Procède à une opération liée à un contenu binaire. */
+G_MODULE_EXPORT void chrysalide_plugin_handle_binary_content(const GPluginModule *, PluginAction, GBinContent *, wgroup_id_t, GtkStatusStack *);
+
+
+
+#endif  /* _PLUGINS_BOOTIMG_CORE_H */
diff --git a/plugins/bootimg/format-int.c b/plugins/bootimg/format-int.c
new file mode 100644
index 0000000..f898d5f
--- /dev/null
+++ b/plugins/bootimg/format-int.c
@@ -0,0 +1,112 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * format-int.c - structures internes du format BOOT.img
+ *
+ * Copyright (C) 2019 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with Chrysalide.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#include "format-int.h"
+
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : format = informations chargées à consulter.                  *
+*                header = en-tête à déterminer. [OUT]                         *
+*                                                                             *
+*  Description : Procède à la lecture de l'entête d'une image BOOT.img.       *
+*                                                                             *
+*  Retour      : Bilan de l'opération.                                        *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+bool read_bootimg_header(GBootImgFormat *format, boot_img_hdr *header)
+{
+    bool result;                            /* Bilan à retourner           */
+    GBinContent *content;                   /* Contenu binaire à lire      */
+    vmpa2t pos;                             /* Position de lecture         */
+
+    content = g_known_format_get_content(G_KNOWN_FORMAT(format));
+
+    init_vmpa(&pos, 0, VMPA_NO_VIRTUAL);
+
+    result = g_binary_content_read_raw(content, &pos, BOOT_MAGIC_SIZE, (bin_t *)header->magic);
+
+    if (result)
+        result = g_binary_content_read_u32(content, &pos, SRE_LITTLE, &header->kernel_size);
+
+    if (result)
+        result = g_binary_content_read_u32(content, &pos, SRE_LITTLE, &header->kernel_addr);
+
+    if (result)
+        result = g_binary_content_read_u32(content, &pos, SRE_LITTLE, &header->ramdisk_size);
+
+    if (result)
+        result = g_binary_content_read_u32(content, &pos, SRE_LITTLE, &header->ramdisk_addr);
+
+    if (result)
+        result = g_binary_content_read_u32(content, &pos, SRE_LITTLE, &header->second_size);
+
+    if (result)
+        result = g_binary_content_read_u32(content, &pos, SRE_LITTLE, &header->second_addr);
+
+    if (result)
+        result = g_binary_content_read_u32(content, &pos, SRE_LITTLE, &header->tags_addr);
+
+    if (result)
+        result = g_binary_content_read_u32(content, &pos, SRE_LITTLE, &header->page_size);
+
+    if (result)
+        result = g_binary_content_read_u32(content, &pos, SRE_LITTLE, &header->header_version);
+
+    if (result)
+        result = g_binary_content_read_u32(content, &pos, SRE_LITTLE, &header->os_version);
+
+    if (result)
+        result = g_binary_content_read_raw(content, &pos, BOOT_NAME_SIZE, (bin_t *)header->name);
+
+    if (result)
+        result = g_binary_content_read_raw(content, &pos, BOOT_ARGS_SIZE, (bin_t *)header->cmdline);
+
+    if (result)
+        result = g_binary_content_read_raw(content, &pos, 8, (bin_t *)header->id);
+
+    if (result)
+        result = g_binary_content_read_raw(content, &pos, BOOT_EXTRA_ARGS_SIZE, (bin_t *)header->extra_cmdline);
+
+    if (result && header->header_version == 1)
+    {
+        if (result)
+            result = g_binary_content_read_u32(content, &pos, SRE_LITTLE, &header->recovery_dtbo_size);
+
+        if (result)
+            result = g_binary_content_read_u64(content, &pos, SRE_LITTLE, &header->recovery_dtbo_offset);
+
+        if (result)
+            result = g_binary_content_read_u32(content, &pos, SRE_LITTLE, &header->header_size);
+
+    }
+
+    g_object_unref(G_OBJECT(content));
+
+    return result;
+
+}
diff --git a/plugins/bootimg/format-int.h b/plugins/bootimg/format-int.h
new file mode 100644
index 0000000..560841d
--- /dev/null
+++ b/plugins/bootimg/format-int.h
@@ -0,0 +1,59 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * format-int.h - prototypes pour les structures internes du format BOOT.img
+ *
+ * Copyright (C) 2019 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with Chrysalide.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#ifndef _PLUGINS_BOOTIMG_FORMAT_INT_H
+#define _PLUGINS_BOOTIMG_FORMAT_INT_H
+
+
+#include <format/known-int.h>
+
+
+#include "format.h"
+
+
+
+/* Format d'une image de démarrage (instance) */
+struct _GBootImgFormat
+{
+    GKnownFormat parent;                    /* A laisser en premier        */
+
+    GBinContent *content;                   /* Contenu binaire à étudier   */
+
+    boot_img_hdr header;                    /* Entête du format            */
+
+};
+
+/* Format d'une image de démarrage (classe) */
+struct _GBootImgFormatClass
+{
+    GKnownFormatClass parent;               /* A laisser en premier        */
+
+};
+
+
+/* Procède à la lecture de l'entête d'une image BOOT.img. */
+bool read_bootimg_header(GBootImgFormat *, boot_img_hdr *);
+
+
+
+#endif  /* _PLUGINS_BOOTIMG_FORMAT_INT_H */
diff --git a/plugins/bootimg/format.c b/plugins/bootimg/format.c
new file mode 100644
index 0000000..f41f98d
--- /dev/null
+++ b/plugins/bootimg/format.c
@@ -0,0 +1,404 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * format.h - support du format BOOT.img
+ *
+ * Copyright (C) 2019 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with Chrysalide.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#include "format.h"
+
+
+#include <string.h>
+
+
+#include <i18n.h>
+#include <analysis/contents/memory.h>
+
+
+#include "format-int.h"
+
+
+
+/* Initialise la classe des formats d'exécutables ELF. */
+static void g_bootimg_format_class_init(GBootImgFormatClass *);
+
+/* Initialise une instance de format d'exécutable ELF. */
+static void g_bootimg_format_init(GBootImgFormat *);
+
+/* Supprime toutes les références externes. */
+static void g_bootimg_format_dispose(GBootImgFormat *);
+
+/* Procède à la libération totale de la mémoire. */
+static void g_bootimg_format_finalize(GBootImgFormat *);
+
+/* Indique la désignation interne du format. */
+static const char *g_bootimg_format_get_name(const GBootImgFormat *);
+
+/* Fournit une description humaine du format. */
+static const char *g_bootimg_format_get_description(const GBootImgFormat *);
+
+/* Assure l'interprétation d'un format en différé. */
+static bool g_bootimg_format_analyze(GBootImgFormat *, wgroup_id_t, GtkStatusStack *);
+
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : content = contenu binaire à traiter.                         *
+*                                                                             *
+*  Description : Valide un contenu comme étant un format Elf.                 *
+*                                                                             *
+*  Retour      : -                                                            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+bool check_bootimg_format(const GBinContent *content)
+{
+    bool result;                            /* Bilan à faire remonter      */
+    vmpa2t addr;                            /* Tête de lecture initiale    */
+    char magic[BOOT_MAGIC_SIZE];            /* Idenfiant standard          */
+
+    init_vmpa(&addr, 0, VMPA_NO_VIRTUAL);
+
+    result = g_binary_content_read_raw(content, &addr, BOOT_MAGIC_SIZE, (bin_t *)magic);
+
+    if (result)
+        result = (memcmp(magic, BOOT_MAGIC, BOOT_MAGIC_SIZE) == 0);
+
+    return result;
+
+}
+
+
+/* Indique le type défini pour un format d'image BOOT.img. */
+G_DEFINE_TYPE(GBootImgFormat, g_bootimg_format, G_TYPE_KNOWN_FORMAT);
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : klass = classe à initialiser.                                *
+*                                                                             *
+*  Description : Initialise la classe des formats d'exécutables ELF.          *
+*                                                                             *
+*  Retour      : -                                                            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static void g_bootimg_format_class_init(GBootImgFormatClass *klass)
+{
+    GObjectClass *object;                   /* Autre version de la classe  */
+    GKnownFormatClass *known;               /* Version parente de la classe*/
+
+    object = G_OBJECT_CLASS(klass);
+
+    object->dispose = (GObjectFinalizeFunc/* ! */)g_bootimg_format_dispose;
+    object->finalize = (GObjectFinalizeFunc)g_bootimg_format_finalize;
+
+    known = G_KNOWN_FORMAT_CLASS(klass);
+
+    known->get_name = (known_get_name_fc)g_bootimg_format_get_name;
+    known->get_desc = (known_get_desc_fc)g_bootimg_format_get_description;
+    known->analyze = (known_analyze_fc)g_bootimg_format_analyze;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : format = instance à initialiser.                             *
+*                                                                             *
+*  Description : Initialise une instance de format d'exécutable ELF.          *
+*                                                                             *
+*  Retour      : -                                                            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static void g_bootimg_format_init(GBootImgFormat *format)
+{
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : format = instance d'objet GLib à traiter.                    *
+*                                                                             *
+*  Description : Supprime toutes les références externes.                     *
+*                                                                             *
+*  Retour      : -                                                            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static void g_bootimg_format_dispose(GBootImgFormat *format)
+{
+    G_OBJECT_CLASS(g_bootimg_format_parent_class)->dispose(G_OBJECT(format));
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : format = instance d'objet GLib à traiter.                    *
+*                                                                             *
+*  Description : Procède à la libération totale de la mémoire.                *
+*                                                                             *
+*  Retour      : -                                                            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static void g_bootimg_format_finalize(GBootImgFormat *format)
+{
+    G_OBJECT_CLASS(g_bootimg_format_parent_class)->finalize(G_OBJECT(format));
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : content = contenu binaire à parcourir.                       *
+*                                                                             *
+*  Description : Prend en charge un nouveau format ELF.                       *
+*                                                                             *
+*  Retour      : Adresse de la structure mise en place ou NULL en cas d'échec.*
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+GBootImgFormat *g_bootimg_format_new(GBinContent *content)
+{
+    GBootImgFormat *result;                     /* Structure à retourner       */
+
+    if (!check_bootimg_format(content))
+        return NULL;
+
+    result = g_object_new(G_TYPE_BOOTIMG_FORMAT, NULL);
+
+    g_known_format_set_content(G_KNOWN_FORMAT(result), content);
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : format = description du format à consulter.                  *
+*                                                                             *
+*  Description : Indique la désignation interne du format.                    *
+*                                                                             *
+*  Retour      : Description du format.                                       *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static const char *g_bootimg_format_get_name(const GBootImgFormat *format)
+{
+    const char *result;                     /* Désignation à retourner     */
+
+    result = "bootimg";
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : format = description de l'exécutable à consulter.            *
+*                                                                             *
+*  Description : Fournit une description humaine du format.                   *
+*                                                                             *
+*  Retour      : Description du format.                                       *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static const char *g_bootimg_format_get_description(const GBootImgFormat *format)
+{
+    const char *result;                     /* Désignation à retourner     */
+
+    result = "Android Boot Image";
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : format = format chargé dont l'analyse est lancée.            *
+*                gid    = groupe de travail dédié.                            *
+*                status = barre de statut à tenir informée.                   *
+*                                                                             *
+*  Description : Assure l'interprétation d'un format en différé.              *
+*                                                                             *
+*  Retour      : Bilan de l'opération.                                        *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static bool g_bootimg_format_analyze(GBootImgFormat *format, wgroup_id_t gid, GtkStatusStack *status)
+{
+    bool result;                            /* Bilan à retourner           */
+
+    result = read_bootimg_header(format, &format->header);
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : format = informations chargées à consulter.                  *
+*                                                                             *
+*  Description : Présente l'entête BOOT.img du format chargé.                 *
+*                                                                             *
+*  Retour      : Pointeur vers la description principale.                     *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+const boot_img_hdr *g_bootimg_format_get_header(const GBootImgFormat *format)
+{
+    const boot_img_hdr *result;             /* Structure à retourner       */
+
+    result = &format->header;
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : format = informations chargées à consulter.                  *
+*                                                                             *
+*  Description : Fournit le noyau inclus dans une image de démarrage.         *
+*                                                                             *
+*  Retour      : Nouveau contenu binaire ou NULL en cas d'absence.            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+GBinContent *g_bootimg_format_get_kernel(const GBootImgFormat *format)
+{
+    GBinContent *result;                    /* Contenu à renvoyer          */
+    phys_t offset;                          /* Départ de la zone à traiter */
+    phys_t size;                            /* Taille de la zone à traiter */
+    vmpa2t pos;                             /* Position de lecture         */
+    GBinContent *content;                   /* Contenu binaire à lire      */
+    const bin_t *data;                      /* Donnée du contenu nouveau   */
+
+    result = NULL;
+
+    if (format->header.kernel_addr == 0) goto no_kernel;
+
+    offset = 1 * format->header.page_size;
+
+    size = format->header.ramdisk_size;
+
+    init_vmpa(&pos, offset, VMPA_NO_VIRTUAL);
+
+    content = g_known_format_get_content(G_KNOWN_FORMAT(format));
+
+    data = g_binary_content_get_raw_access(content, &pos, size);
+    if (data == NULL) goto no_data;
+
+    result = g_memory_content_new(data, size);
+
+ no_data:
+
+    g_object_unref(G_OBJECT(content));
+
+ no_kernel:
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : format = informations chargées à consulter.                  *
+*                                                                             *
+*  Description : Fournit le disque en RAM inclus dans une image de démarrage. *
+*                                                                             *
+*  Retour      : Nouveau contenu binaire ou NULL en cas d'absence.            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+GBinContent *g_bootimg_format_get_ramdisk(const GBootImgFormat *format)
+{
+    GBinContent *result;                    /* Contenu à renvoyer          */
+    phys_t offset;                          /* Départ de la zone à traiter */
+    phys_t size;                            /* Taille de la zone à traiter */
+    vmpa2t pos;                             /* Position de lecture         */
+    GBinContent *content;                   /* Contenu binaire à lire      */
+    const bin_t *data;                      /* Donnée du contenu nouveau   */
+
+    result = NULL;
+
+    if (format->header.ramdisk_addr == 0) goto no_ramdisk;
+
+    offset = format->header.kernel_size / format->header.page_size;
+
+    if (format->header.kernel_size % format->header.page_size != 0)
+        offset++;
+
+    offset = (1 + offset) * format->header.page_size;
+
+    size = format->header.ramdisk_size;
+
+    init_vmpa(&pos, offset, VMPA_NO_VIRTUAL);
+
+    content = g_known_format_get_content(G_KNOWN_FORMAT(format));
+
+    data = g_binary_content_get_raw_access(content, &pos, size);
+    if (data == NULL) goto no_data;
+
+    result = g_memory_content_new(data, size);
+
+ no_data:
+
+    g_object_unref(G_OBJECT(content));
+
+ no_ramdisk:
+
+    return result;
+
+}
diff --git a/plugins/bootimg/format.h b/plugins/bootimg/format.h
new file mode 100644
index 0000000..6197727
--- /dev/null
+++ b/plugins/bootimg/format.h
@@ -0,0 +1,74 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * format.h - prototypes pour le support du format BOOT.img
+ *
+ * Copyright (C) 2019 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with Chrysalide.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#ifndef _PLUGINS_BOOTIMG_FORMAT_H
+#define _PLUGINS_BOOTIMG_FORMAT_H
+
+
+#include <glib-object.h>
+#include <stdbool.h>
+
+
+#include <analysis/content.h>
+
+
+#include "bootimg-def.h"
+
+
+
+#define G_TYPE_BOOTIMG_FORMAT            g_bootimg_format_get_type()
+#define G_BOOTIMG_FORMAT(obj)            (G_TYPE_CHECK_INSTANCE_CAST((obj), G_TYPE_BOOTIMG_FORMAT, GBootImgFormat))
+#define G_IS_BOOTIMG_FORMAT(obj)         (G_TYPE_CHECK_INSTANCE_TYPE((obj), G_TYPE_BOOTIMG_FORMAT))
+#define G_BOOTIMG_FORMAT_CLASS(klass)    (G_TYPE_CHECK_CLASS_CAST((klass), G_TYPE_BOOTIMG_FORMAT, GBootImgFormatClass))
+#define G_IS_BOOTIMG_FORMAT_CLASS(klass) (G_TYPE_CHECK_CLASS_TYPE((klass), G_TYPE_BOOTIMG_FORMAT))
+#define G_BOOTIMG_FORMAT_GET_CLASS(obj)  (G_TYPE_INSTANCE_GET_CLASS((obj), G_TYPE_BOOTIMG_FORMAT, GBootImgFormatClass))
+
+
+/* Format d'image BOOT.img (instance) */
+typedef struct _GBootImgFormat GBootImgFormat;
+
+/* Format d'image BOOT.img (classe) */
+typedef struct _GBootImgFormatClass GBootImgFormatClass;
+
+
+/* Valide un contenu comme étant un format BOOT.img. */
+bool check_bootimg_format(const GBinContent *);
+
+/* Indique le type défini pour un format d'image BOOT.img. */
+GType g_bootimg_format_get_type(void);
+
+/* Prend en charge un nouveau format BOOT.img. */
+GBootImgFormat *g_bootimg_format_new(GBinContent *);
+
+/* Présente l'entête BOOT.img du format chargé. */
+const boot_img_hdr *g_bootimg_format_get_header(const GBootImgFormat *);
+
+/* Fournit le noyau inclus dans une image de démarrage. */
+GBinContent *g_bootimg_format_get_kernel(const GBootImgFormat *);
+
+/* Fournit le disque en RAM inclus dans une image de démarrage. */
+GBinContent *g_bootimg_format_get_ramdisk(const GBootImgFormat *);
+
+
+
+#endif  /* _PLUGINS_BOOTIMG_FORMAT_H */
diff --git a/plugins/bootimg/python/Makefile.am b/plugins/bootimg/python/Makefile.am
new file mode 100644
index 0000000..a79af4d
--- /dev/null
+++ b/plugins/bootimg/python/Makefile.am
@@ -0,0 +1,20 @@
+
+noinst_LTLIBRARIES = libbootimgpython.la
+
+libbootimgpython_la_SOURCES =			\
+	format.h format.c					\
+	module.h module.c					\
+	translate.h translate.c
+
+libbootimgpython_la_LDFLAGS = 
+
+
+devdir = $(includedir)/chrysalide-$(subdir)
+
+dev_HEADERS = $(libbootimgpython_la_SOURCES:%c=)
+
+
+AM_CPPFLAGS = $(LIBGTK_CFLAGS) $(LIBXML_CFLAGS) $(LIBPYTHON_CFLAGS) $(LIBPYGOBJECT_CFLAGS) \
+	-I$(top_srcdir)/src -DNO_IMPORT_PYGOBJECT
+
+AM_CFLAGS = $(DEBUG_CFLAGS) $(WARNING_FLAGS) $(COMPLIANCE_FLAGS)
diff --git a/plugins/bootimg/python/format.c b/plugins/bootimg/python/format.c
new file mode 100644
index 0000000..ac987fc
--- /dev/null
+++ b/plugins/bootimg/python/format.c
@@ -0,0 +1,311 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * format.c - équivalent Python du fichier "plugins/bootimg/format.c"
+ *
+ * Copyright (C) 2013-2017 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+ */
+
+
+#include "format.h"
+
+
+#include <pygobject.h>
+
+
+#include <i18n.h>
+#include <plugins/pychrysalide/helpers.h>
+#include <plugins/pychrysalide/analysis/content.h>
+#include <plugins/pychrysalide/format/known.h>
+
+
+#include "translate.h"
+#include "../format.h"
+
+
+
+/* Crée un nouvel objet Python de type 'BootImgFormat'. */
+static PyObject *py_bootimg_format_new(PyTypeObject *, PyObject *, PyObject *);
+
+/* Fournit l'en-tête Bootimg correspondant au format. */
+static PyObject *py_bootimg_format_get_header(PyObject *, void *);
+
+/* Fournit le noyau inclus dans une image de démarrage. */
+static PyObject *py_bootimg_format_get_kernel(PyObject *, void *);
+
+/* Fournit le disque en RAM inclus dans une image de démarrage. */
+static PyObject *py_bootimg_format_get_ramdisk(PyObject *, void *);
+
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : type = type de l'objet à instancier.                         *
+*                args = arguments fournis à l'appel.                          *
+*                kwds = arguments de type key=val fournis.                    *
+*                                                                             *
+*  Description : Crée un nouvel objet Python de type 'BootImgFormat'.         *
+*                                                                             *
+*  Retour      : Instance Python mise en place.                               *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static PyObject *py_bootimg_format_new(PyTypeObject *type, PyObject *args, PyObject *kwds)
+{
+    PyObject *result;                       /* Instance à retourner        */
+    GBinContent *content;                   /* Instance GLib du contenu    */
+    int ret;                                /* Bilan de lecture des args.  */
+    GBootImgFormat *format;                 /* Création GLib à transmettre */
+
+#define BOOTIMG_FORMAT_DOC                                                      \
+    "BootImgFormat provides support for Android boot images.\n"                 \
+    "\n"                                                                        \
+    "Instances can be created using the following constructor:\n"               \
+    "\n"                                                                        \
+    "    BootImgFormat(content)"                                                \
+    "\n"                                                                        \
+    "Where content is the binary content of a file usually named 'boot.img'."
+
+    ret = PyArg_ParseTuple(args, "O&", convert_to_binary_content, &content);
+    if (!ret) return NULL;
+
+    format = g_bootimg_format_new(content);
+
+    if (format == NULL)
+    {
+        result = Py_None;
+        Py_INCREF(result);
+    }
+
+    else
+    {
+        result = pygobject_new(G_OBJECT(format));
+        g_object_unref(format);
+    }
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : self    = contenu binaire à manipuler.                       *
+*                closure = non utilisé ici.                                   *
+*                                                                             *
+*  Description : Fournit l'entête Bootimg correspondant au format.            *
+*                                                                             *
+*  Retour      : Structure Python créée pour l'occasion.                      *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static PyObject *py_bootimg_format_get_header(PyObject *self, void *closure)
+{
+    PyObject *result;                       /* Trouvaille à retourner      */
+    GBootImgFormat *format;                 /* Version GLib du format      */
+    const boot_img_hdr *header;             /* Entête à transcrire         */
+
+#define BOOTING_FORMAT_HEADER_ATTRIB PYTHON_GET_DEF_FULL    \
+(                                                           \
+    header, py_bootimg_format,                              \
+    "Header of the boot image."                             \
+)
+
+    format = G_BOOTIMG_FORMAT(pygobject_get(self));
+
+    header = g_bootimg_format_get_header(format);
+
+    result = translate_bootimg_header_to_python(header);
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : self    = objet Python concerné par l'appel.                 *
+*                closure = non utilisé ici.                                   *
+*                                                                             *
+*  Description : Fournit le noyau inclus dans une image de démarrage.         *
+*                                                                             *
+*  Retour      : Nouveau contenu binaire ou NULL en cas d'absence.            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static PyObject *py_bootimg_format_get_kernel(PyObject *self, void *closure)
+{
+    PyObject *result;                       /* Trouvailles à retourner     */
+    GBootImgFormat *format;                 /* Version GLib du format      */
+    GBinContent *content;                   /* Contenu à transmettre       */
+
+#define BOOTING_FORMAT_KERNEL_ATTRIB PYTHON_GET_DEF_FULL                            \
+(                                                                                   \
+    kernel, py_bootimg_format,                                                      \
+    "Binary content for the (Linux) kernel contained in the boot image, or None."   \
+)
+
+    format = G_BOOTIMG_FORMAT(pygobject_get(self));
+
+    content = g_bootimg_format_get_ramdisk(format);
+
+    if (content == NULL)
+    {
+        result = Py_None;
+        Py_INCREF(result);
+    }
+
+    else
+    {
+        g_object_ref_sink(content);
+        result = pygobject_new(G_OBJECT(content));
+        g_object_unref(content);
+    }
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : self    = objet Python concerné par l'appel.                 *
+*                closure = non utilisé ici.                                   *
+*                                                                             *
+*  Description : Fournit le disque en RAM inclus dans une image de démarrage. *
+*                                                                             *
+*  Retour      : Nouveau contenu binaire ou None en cas d'absence.            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static PyObject *py_bootimg_format_get_ramdisk(PyObject *self, void *closure)
+{
+    PyObject *result;                       /* Trouvailles à retourner     */
+    GBootImgFormat *format;                 /* Version GLib du format      */
+    GBinContent *content;                   /* Contenu à transmettre       */
+
+#define BOOTING_FORMAT_RAMDISK_ATTRIB PYTHON_GET_DEF_FULL                   \
+(                                                                           \
+    ramdisk, py_bootimg_format,                                             \
+    "Binary content for the ramdisk contained in the boot image, or None."  \
+)
+
+    format = G_BOOTIMG_FORMAT(pygobject_get(self));
+
+    content = g_bootimg_format_get_ramdisk(format);
+
+    if (content == NULL)
+    {
+        result = Py_None;
+        Py_INCREF(result);
+    }
+
+    else
+    {
+        g_object_ref_sink(content);
+        result = pygobject_new(G_OBJECT(content));
+        g_object_unref(content);
+    }
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : -                                                            *
+*                                                                             *
+*  Description : Fournit un accès à une définition de type à diffuser.        *
+*                                                                             *
+*  Retour      : Définition d'objet pour Python.                              *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+PyTypeObject *get_python_bootimg_format_type(void)
+{
+    static PyMethodDef py_bootimg_format_methods[] = {
+        { NULL }
+    };
+
+    static PyGetSetDef py_bootimg_format_getseters[] = {
+        BOOTING_FORMAT_HEADER_ATTRIB,
+        BOOTING_FORMAT_KERNEL_ATTRIB,
+        BOOTING_FORMAT_RAMDISK_ATTRIB,
+        { NULL }
+    };
+
+    static PyTypeObject py_bootimg_format_type = {
+
+        PyVarObject_HEAD_INIT(NULL, 0)
+
+        .tp_name        = "pychrysalide.format.bootimg.BootImgFormat",
+        .tp_basicsize   = sizeof(PyGObject),
+
+        .tp_flags       = Py_TPFLAGS_DEFAULT,
+
+        .tp_doc         = BOOTIMG_FORMAT_DOC,
+
+        .tp_methods     = py_bootimg_format_methods,
+        .tp_getset      = py_bootimg_format_getseters,
+        .tp_new         = py_bootimg_format_new
+
+    };
+
+    return &py_bootimg_format_type;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : module = module dont la définition est à compléter.          *
+*                                                                             *
+*  Description : Prend en charge l'objet 'pychrysalide.format..BootImgFormat'.*
+*                                                                             *
+*  Retour      : Bilan de l'opération.                                        *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+bool register_python_bootimg_format(PyObject *module)
+{
+    PyTypeObject *type;                     /* Type Python 'BootImgFormat' */
+    PyObject *dict;                         /* Dictionnaire du module      */
+
+    type = get_python_bootimg_format_type();
+
+    dict = PyModule_GetDict(module);
+
+    if (!register_class_for_pygobject(dict, G_TYPE_BOOTIMG_FORMAT, type, get_python_known_format_type()))
+        return false;
+
+    return true;
+
+}
diff --git a/plugins/bootimg/python/format.h b/plugins/bootimg/python/format.h
new file mode 100644
index 0000000..495d46e
--- /dev/null
+++ b/plugins/bootimg/python/format.h
@@ -0,0 +1,42 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * format.h - prototypes pour l'équivalent Python du fichier "plugins/bootimg/format.h"
+ *
+ * Copyright (C) 2013-2017 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+ */
+
+
+#ifndef _PLUGINS_BOOTIMG_PYTHON_FORMAT_H
+#define _PLUGINS_BOOTIMG_PYTHON_FORMAT_H
+
+
+#include <Python.h>
+#include <stdbool.h>
+
+
+
+/* Fournit un accès à une définition de type à diffuser. */
+PyTypeObject *get_python_bootimg_format_type(void);
+
+/* Prend en charge l'objet 'pychrysalide.format.bootimg.BootImgFormat'. */
+bool register_python_bootimg_format(PyObject *);
+
+
+
+#endif  /* _PLUGINS_BOOTIMG_PYTHON_FORMAT_H */
diff --git a/plugins/bootimg/python/module.c b/plugins/bootimg/python/module.c
new file mode 100644
index 0000000..ee36ecf
--- /dev/null
+++ b/plugins/bootimg/python/module.c
@@ -0,0 +1,82 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * module.c - intégration du répertoire bootimg en tant que module
+ *
+ * Copyright (C) 2019 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+ */
+
+
+#include "module.h"
+
+
+#include <Python.h>
+
+
+#include <plugins/pychrysalide/access.h>
+#include <plugins/pychrysalide/helpers.h>
+
+
+#include "format.h"
+
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : -                                                            *
+*                                                                             *
+*  Description : Ajoute le module 'format.bootimg' au module Python.          *
+*                                                                             *
+*  Retour      : -                                                            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+bool add_format_bootimg_module_to_python_module(void)
+{
+    bool result;                            /* Bilan à retourner           */
+    PyObject *super;                        /* Module à compléter          */
+    PyObject *module;                       /* Sous-module mis en place    */
+
+    static PyModuleDef py_chrysalide_bootimg_module = {
+
+        .m_base = PyModuleDef_HEAD_INIT,
+
+        .m_name = "pychrysalide.format.bootimg",
+        .m_doc = "Python module for Chrysalide.format.bootimg",
+
+        .m_size = -1,
+
+    };
+
+    result = false;
+
+    super = get_access_to_python_module("pychrysalide.format");
+
+    module = build_python_module(super, &py_chrysalide_bootimg_module);
+
+    result = (module != NULL);
+
+    if (result) result = register_python_bootimg_format(module);
+
+    assert(result);
+
+    return result;
+
+}
diff --git a/plugins/bootimg/python/module.h b/plugins/bootimg/python/module.h
new file mode 100644
index 0000000..d78ab38
--- /dev/null
+++ b/plugins/bootimg/python/module.h
@@ -0,0 +1,38 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * module.h - prototypes pour l'intégration du répertoire bootimg en tant que module
+ *
+ * Copyright (C) 2019 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+ */
+
+
+#ifndef _PLUGINS_BOOTIMG_PYTHON_MODULE_H
+#define _PLUGINS_BOOTIMG_PYTHON_MODULE_H
+
+
+#include <stdbool.h>
+
+
+
+/* Ajoute le module 'format.bootimg' au module Python. */
+bool add_format_bootimg_module_to_python_module(void);
+
+
+
+#endif  /* _PLUGINS_BOOTIMG_PYTHON_MODULE_H */
diff --git a/plugins/bootimg/python/translate.c b/plugins/bootimg/python/translate.c
new file mode 100644
index 0000000..6d982c7
--- /dev/null
+++ b/plugins/bootimg/python/translate.c
@@ -0,0 +1,110 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * translate.c - conversion de structures ELF en objets Python
+ *
+ * Copyright (C) 2017 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+ */
+
+
+#include "translate.h"
+
+
+#include <assert.h>
+
+
+#include <plugins/pychrysalide/struct.h>
+
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : header = entête BOOT.img à décrire en Python.                *
+*                                                                             *
+*  Description : Traduit un entête BOOT.img en Python.                        *
+*                                                                             *
+*  Retour      : Structure mise en place ou NULL en cas d'erreur.             *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+PyObject *translate_bootimg_header_to_python(const boot_img_hdr *header)
+{
+    PyObject *result;                       /* Construction à retourner    */
+    PyTypeObject *base;                     /* Modèle d'objet à créer      */
+    PyObject *attrib;                       /* Attribut à constituer       */
+    int ret;                                /* Bilan d'une mise en place   */
+
+    base = get_python_py_struct_type();
+
+    result = PyObject_CallFunction((PyObject *)base, NULL);
+    assert(result != NULL);
+
+
+#define TRANSLATE_HEADER_BYTE_VALUE(_f, _sz)                            \
+    do                                                                  \
+    {                                                                   \
+        attrib = PyBytes_FromStringAndSize((char *)header->_f, _sz);    \
+        ret = PyDict_SetItemString(result, #_f, attrib);                \
+        if (ret != 0) goto failed;                                      \
+    }                                                                   \
+    while (0);
+
+#define TRANSLATE_HEADER_NUMERIC_VALUE(_f)                              \
+    do                                                                  \
+    {                                                                   \
+        attrib = PyLong_FromUnsignedLongLong(header->_f);               \
+        ret = PyDict_SetItemString(result, #_f, attrib);                \
+        if (ret != 0) goto failed;                                      \
+    }                                                                   \
+    while (0);
+
+
+    TRANSLATE_HEADER_BYTE_VALUE(magic, BOOT_MAGIC_SIZE);
+    TRANSLATE_HEADER_NUMERIC_VALUE(kernel_size);
+    TRANSLATE_HEADER_NUMERIC_VALUE(kernel_addr);
+
+    TRANSLATE_HEADER_NUMERIC_VALUE(ramdisk_size);
+    TRANSLATE_HEADER_NUMERIC_VALUE(ramdisk_addr);
+
+    TRANSLATE_HEADER_NUMERIC_VALUE(second_size);
+    TRANSLATE_HEADER_NUMERIC_VALUE(second_addr);
+
+    TRANSLATE_HEADER_NUMERIC_VALUE(tags_addr);
+    TRANSLATE_HEADER_NUMERIC_VALUE(page_size);
+    TRANSLATE_HEADER_NUMERIC_VALUE(header_version);
+    TRANSLATE_HEADER_NUMERIC_VALUE(os_version);
+    TRANSLATE_HEADER_BYTE_VALUE(name, BOOT_NAME_SIZE);
+    TRANSLATE_HEADER_BYTE_VALUE(cmdline, BOOT_ARGS_SIZE);
+    TRANSLATE_HEADER_BYTE_VALUE(id, 8 * sizeof(uint32_t));
+    TRANSLATE_HEADER_BYTE_VALUE(extra_cmdline, BOOT_EXTRA_ARGS_SIZE);
+
+    TRANSLATE_HEADER_NUMERIC_VALUE(recovery_dtbo_size);
+    TRANSLATE_HEADER_NUMERIC_VALUE(recovery_dtbo_offset);
+    TRANSLATE_HEADER_NUMERIC_VALUE(header_size);
+
+    return result;
+
+ failed:
+
+    Py_DECREF(result);
+
+    return NULL;
+
+}
diff --git a/plugins/bootimg/python/translate.h b/plugins/bootimg/python/translate.h
new file mode 100644
index 0000000..1402dc7
--- /dev/null
+++ b/plugins/bootimg/python/translate.h
@@ -0,0 +1,41 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * translate.h - prototypes pour la conversion de structures BOOT.img en objets Python
+ *
+ * Copyright (C) 2019 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+ */
+
+
+#ifndef _PLUGINS_BOOTIMG_PYTHON_TRANSLATE_H
+#define _PLUGINS_BOOTIMG_PYTHON_TRANSLATE_H
+
+
+#include <Python.h>
+
+
+#include "../bootimg-def.h"
+
+
+
+/* Traduit un entête BOOT.img en Python. */
+PyObject *translate_bootimg_header_to_python(const boot_img_hdr *);
+
+
+
+#endif  /* _PLUGINS_BOOTIMG_PYTHON_TRANSLATE_H */
diff --git a/plugins/pychrysalide/format/Makefile.am b/plugins/pychrysalide/format/Makefile.am
index 847f8e4..6d50da7 100644
--- a/plugins/pychrysalide/format/Makefile.am
+++ b/plugins/pychrysalide/format/Makefile.am
@@ -5,6 +5,7 @@ libpychrysaformat_la_SOURCES =			\
 	executable.h executable.c			\
 	flat.h flat.c						\
 	format.h format.c					\
+	known.h known.c						\
 	module.h module.c					\
 	strsym.h strsym.c					\
 	symbol.h symbol.c					\
diff --git a/plugins/pychrysalide/format/known.c b/plugins/pychrysalide/format/known.c
new file mode 100644
index 0000000..e19a4a2
--- /dev/null
+++ b/plugins/pychrysalide/format/known.c
@@ -0,0 +1,292 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * known.c - équivalent Python du fichier "format/known.c"
+ *
+ * Copyright (C) 2019 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+ */
+
+
+#include "known.h"
+
+
+#include <pygobject.h>
+
+
+#include <format/known.h>
+
+
+#include "../access.h"
+#include "../helpers.h"
+
+
+
+/* Assure l'interprétation d'un format en différé. */
+static PyObject *py_known_format_analyze(PyObject *, PyObject *);
+
+/* Indique la désignation interne du format. */
+static PyObject *py_known_format_get_name(PyObject *, void *);
+
+/* Indique la désignation humaine du format. */
+static PyObject *py_known_format_get_description(PyObject *, void *);
+
+/* Fournit une référence vers le contenu binaire analysé. */
+static PyObject *py_known_format_get_content(PyObject *, void *);
+
+
+
+#define KNOWN_FORMAT_DOC                                                                \
+    "KnownFormat is a small class providing basic features for recognized formats."
+
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : self = objet représentant un format connu.                   *
+*                args = arguments fournis pour l'opération.                   *
+*                                                                             *
+*  Description : Assure l'interprétation d'un format en différé.              *
+*                                                                             *
+*  Retour      : Bilan de l'opération.                                        *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static PyObject *py_known_format_analyze(PyObject *self, PyObject *args)
+{
+    PyObject *result;                       /* Bilan à retourner           */
+    int ret;                                /* Bilan de lecture des args.  */
+    GKnownFormat *format;                   /* Format connu manipulé       */
+    bool status;                            /* Bilan de l'opération        */
+
+#define KNOWN_FORMAT_ANALYZE_METHOD PYTHON_METHOD_DEF                   \
+(                                                                       \
+    analyze, "$self, /, gid, status",                                   \
+    METH_VARARGS, py_known_format,                                      \
+    "Start the analysis of the known format and return its status."     \
+)
+
+    ret = PyArg_ParseTuple(args, "");//|KO!", &gid, &status);
+    if (!ret) return NULL;
+
+    format = G_KNOWN_FORMAT(pygobject_get(self));
+
+    status = g_known_format_analyze(format, 0, NULL);
+
+    result = status ? Py_True : Py_False;
+    Py_INCREF(result);
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : self    = objet Python concerné par l'appel.                 *
+*                closure = non utilisé ici.                                   *
+*                                                                             *
+*  Description : Indique la désignation interne du format.                    *
+*                                                                             *
+*  Retour      : Description du format.                                       *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static PyObject *py_known_format_get_name(PyObject *self, void *closure)
+{
+    PyObject *result;                       /* Trouvailles à retourner     */
+    GKnownFormat *format;                   /* Format de binaire manipulé  */
+    const char *name;                       /* Description interne         */
+
+#define KNOWN_FORMAT_NAME_ATTRIB PYTHON_GET_DEF_FULL        \
+(                                                           \
+    name, py_known_format,                                  \
+    "Internal name of the known format."                    \
+)
+
+    format = G_KNOWN_FORMAT(pygobject_get(self));
+
+    name = g_known_format_get_name(format);
+
+    result = PyUnicode_FromString(name);
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : self    = objet Python concerné par l'appel.                 *
+*                closure = non utilisé ici.                                   *
+*                                                                             *
+*  Description : Indique la désignation humaine du format.                    *
+*                                                                             *
+*  Retour      : Description du format.                                       *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static PyObject *py_known_format_get_description(PyObject *self, void *closure)
+{
+    PyObject *result;                       /* Trouvailles à retourner     */
+    GKnownFormat *format;                   /* Format de binaire manipulé  */
+    const char *desc;                       /* Description humaine         */
+
+#define KNOWN_FORMAT_DESCRIPTION_ATTRIB PYTHON_GET_DEF_FULL     \
+(                                                               \
+    description, py_known_format,                               \
+    "Human description of the known format."                    \
+)
+
+    format = G_KNOWN_FORMAT(pygobject_get(self));
+
+    desc = g_known_format_get_description(format);
+
+    result = PyUnicode_FromString(desc);
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : self    = objet Python concerné par l'appel.                 *
+*                closure = non utilisé ici.                                   *
+*                                                                             *
+*  Description : Fournit une référence vers le contenu binaire analysé.       *
+*                                                                             *
+*  Retour      : Gestionnaire de contenu binaire en place.                    *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+static PyObject *py_known_format_get_content(PyObject *self, void *closure)
+{
+    PyObject *result;                       /* Trouvailles à retourner     */
+    GKnownFormat *format;                   /* Format de binaire manipulé  */
+    GBinContent *content;                   /* Instance GLib correspondante*/
+
+#define KNOWN_FORMAT_CONTENT_ATTRIB PYTHON_GET_DEF_FULL     \
+(                                                           \
+    content, py_known_format,                               \
+    "Binary content linked to the known format."            \
+)
+
+    format = G_KNOWN_FORMAT(pygobject_get(self));
+
+    content = g_known_format_get_content(format);
+
+    result = pygobject_new(G_OBJECT(content));
+
+    g_object_unref(content);
+
+    return result;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : -                                                            *
+*                                                                             *
+*  Description : Fournit un accès à une définition de type à diffuser.        *
+*                                                                             *
+*  Retour      : Définition d'objet pour Python.                              *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+PyTypeObject *get_python_known_format_type(void)
+{
+    static PyMethodDef py_known_format_methods[] = {
+        KNOWN_FORMAT_ANALYZE_METHOD,
+        { NULL }
+    };
+
+    static PyGetSetDef py_known_format_getseters[] = {
+        KNOWN_FORMAT_NAME_ATTRIB,
+        KNOWN_FORMAT_DESCRIPTION_ATTRIB,
+        KNOWN_FORMAT_CONTENT_ATTRIB,
+        { NULL }
+    };
+
+    static PyTypeObject py_known_format_type = {
+
+        PyVarObject_HEAD_INIT(NULL, 0)
+
+        .tp_name        = "pychrysalide.format.KnownFormat",
+        .tp_basicsize   = sizeof(PyGObject),
+
+        .tp_flags       = Py_TPFLAGS_DEFAULT | Py_TPFLAGS_IS_ABSTRACT | Py_TPFLAGS_BASETYPE,
+
+        .tp_doc         = KNOWN_FORMAT_DOC,
+
+        .tp_methods     = py_known_format_methods,
+        .tp_getset      = py_known_format_getseters
+
+    };
+
+    return &py_known_format_type;
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : module = module dont la définition est à compléter.          *
+*                                                                             *
+*  Description : Prend en charge l'objet 'pychrysalide.format.BinFormat'.     *
+*                                                                             *
+*  Retour      : Bilan de l'opération.                                        *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+bool ensure_python_known_format_is_registered(void)
+{
+    PyTypeObject *type;                     /* Type Python 'BinFormat'     */
+    PyObject *module;                       /* Module à recompléter        */
+    PyObject *dict;                         /* Dictionnaire du module      */
+
+    type = get_python_known_format_type();
+
+    if (!PyType_HasFeature(type, Py_TPFLAGS_READY))
+    {
+        module = get_access_to_python_module("pychrysalide.format");
+
+        APPLY_ABSTRACT_FLAG(type);
+
+        dict = PyModule_GetDict(module);
+
+        if (!register_class_for_pygobject(dict, G_TYPE_KNOWN_FORMAT, type, &PyGObject_Type))
+            return false;
+
+    }
+
+    return true;
+
+}
diff --git a/plugins/pychrysalide/format/known.h b/plugins/pychrysalide/format/known.h
new file mode 100644
index 0000000..16cbf83
--- /dev/null
+++ b/plugins/pychrysalide/format/known.h
@@ -0,0 +1,42 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * known.h - prototypes pour l'équivalent Python du fichier "format/known.h"
+ *
+ * Copyright (C) 2019 Cyrille Bagard
+ *
+ *  This file is part of Chrysalide.
+ *
+ *  Chrysalide is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Chrysalide is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+ */
+
+
+#ifndef _PLUGINS_PYCHRYSALIDE_FORMAT_KNOWN_H
+#define _PLUGINS_PYCHRYSALIDE_FORMAT_KNOWN_H
+
+
+#include <Python.h>
+#include <stdbool.h>
+
+
+
+/* Fournit un accès à une définition de type à diffuser. */
+PyTypeObject *get_python_known_format_type(void);
+
+/* Prend en charge l'objet 'pychrysalide.format.KnownFormat'. */
+bool ensure_python_known_format_is_registered(void);
+
+
+
+#endif  /* _PLUGINS_PYCHRYSALIDE_FORMAT_KNOWN_H */
diff --git a/plugins/pychrysalide/format/module.c b/plugins/pychrysalide/format/module.c
index 2f90792..f5768d1 100644
--- a/plugins/pychrysalide/format/module.c
+++ b/plugins/pychrysalide/format/module.c
@@ -31,6 +31,7 @@
 #include "executable.h"
 #include "flat.h"
 #include "format.h"
+#include "known.h"
 #include "strsym.h"
 #include "symbol.h"
 #include "symiter.h"
@@ -95,6 +96,7 @@ bool populate_format_module(void)
 
     if (result) result = ensure_python_executable_format_is_registered();
     if (result) result = ensure_python_flat_format_is_registered();
+    if (result) result = ensure_python_known_format_is_registered();
     if (result) result = ensure_python_binary_format_is_registered();
     if (result) result = ensure_python_string_symbol_is_registered();
     if (result) result = ensure_python_binary_symbol_is_registered();