Parsed x86 binary data and displayed the result.

git-svn-id: svn://svn.gna.org/svn/chrysalide/trunk@6 abbe820e-26c8-41b2-8c08-b7b2b41f8b0a

6 files changed, 458 insertions, 0 deletions

diff --git a/src/arch/x86/Makefile.am b/src/arch/x86/Makefile.am
new file mode 100644
index 0000000..6fe55c8
--- /dev/null
+++ b/src/arch/x86/Makefile.am
@@ -0,0 +1,20 @@
+
+lib_LIBRARIES = libarchx86.a
+
+libarchx86_a_SOURCES =					\
+	instruction.h						\
+	op_int.c							\
+	opcodes.h							\
+	processor.h processor.c
+
+libarchx86_a_CFLAGS = $(AM_CFLAGS)
+
+
+INCLUDES = 
+
+AM_CPPFLAGS = 
+
+AM_CFLAGS = $(DEBUG_CFLAGS) $(WARNING_FLAGS)
+
+
+SUBDIRS = 
diff --git a/src/arch/x86/instruction.h b/src/arch/x86/instruction.h
new file mode 100644
index 0000000..47617ea
--- /dev/null
+++ b/src/arch/x86/instruction.h
@@ -0,0 +1,65 @@
+
+/* OpenIDA - Outil d'analyse de fichiers binaires
+ * instruction.h - prototypes pour la gestion des instructions de l'architecture x86
+ *
+ * Copyright (C) 2008 Cyrille Bagard
+ *
+ *  This file is part of OpenIDA.
+ *
+ *  OpenIDA is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  OpenIDA is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with Foobar.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#ifndef _ARCH_X86_INSTRUCTION_H
+#define _ARCH_X86_INSTRUCTION_H
+
+
+#include "../instruction.h"
+#include "../instruction-int.h"
+
+
+
+/* Définition d'une instruction x86 */
+typedef struct _asm_x86_instr asm_x86_instr;
+
+
+
+/* Enumération de tous les opcodes */
+typedef enum _X86Opcodes
+{
+    X86_OP_INT,                             /* int (0xcd)                  */
+
+
+    X86_OP_COUNT
+
+} X86Opcodes;
+
+
+
+
+/* Définition d'une instruction x86 */
+struct _asm_x86_instr
+{
+    asm_instr base;                         /* A laisser en premier...     */
+
+    X86Opcodes type;
+
+};
+
+
+
+
+
+
+#endif  /* _ARCH_X86_INSTRUCTION_H */
diff --git a/src/arch/x86/op_int.c b/src/arch/x86/op_int.c
new file mode 100644
index 0000000..e7805e1
--- /dev/null
+++ b/src/arch/x86/op_int.c
@@ -0,0 +1,63 @@
+
+/* OpenIDA - Outil d'analyse de fichiers binaires
+ * op_int.c - décodage des instructions d'interruption
+ *
+ * Copyright (C) 2008 Cyrille Bagard
+ *
+ *  This file is part of OpenIDA.
+ *
+ *  OpenIDA is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  OpenIDA is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with Foobar.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#include <malloc.h>
+
+
+#include "instruction.h"
+#include "../instruction-int.h"
+
+
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : data = flux de données à analyser.                           *
+*                pos  = position courante dans ce flux. [OUT]                 *
+*                len  = taille totale des données à analyser.                 *
+*                                                                             *
+*  Description : Décode une instruction de type 'int'.                        *
+*                                                                             *
+*  Retour      : Instruction mise en place ou NULL.                           *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+asm_x86_instr *read_instr_int(const char *data, off_t *pos, off_t len)
+{
+    asm_x86_instr *result;
+
+    result = (asm_x86_instr *)calloc(1, sizeof(asm_x86_instr));
+
+    ASM_INSTRUCTION(result)->opcode = data[(*pos)++];
+
+    /* TODO: check result */
+    fill_db_operand(&ASM_INSTRUCTION(result)->operands[0], data[(*pos)++]);
+
+    ASM_INSTRUCTION(result)->operands_count = 1;
+
+    return result;
+
+}
+
diff --git a/src/arch/x86/opcodes.h b/src/arch/x86/opcodes.h
new file mode 100644
index 0000000..17316e7
--- /dev/null
+++ b/src/arch/x86/opcodes.h
@@ -0,0 +1,40 @@
+
+/* OpenIDA - Outil d'analyse de fichiers binaires
+ * opcodes.h - prototypes pour la liste de tous les opcodes de l'architecture x86
+ *
+ * Copyright (C) 2008 Cyrille Bagard
+ *
+ *  This file is part of OpenIDA.
+ *
+ *  OpenIDA is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  OpenIDA is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with Foobar.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#ifndef _ARCH_X86_OPCODES_H
+#define _ARCH_X86_OPCODES_H
+
+
+#include <sys/types.h>
+
+
+#include "../instruction.h"
+
+
+
+/* Décode une instruction de type 'int'. */
+asm_x86_instr *read_instr_int(const char *, off_t *, off_t);
+
+
+
+#endif  /* _ARCH_X86_OPCODES_H */
diff --git a/src/arch/x86/processor.c b/src/arch/x86/processor.c
new file mode 100644
index 0000000..4ef1377
--- /dev/null
+++ b/src/arch/x86/processor.c
@@ -0,0 +1,228 @@
+
+/* OpenIDA - Outil d'analyse de fichiers binaires
+ * processor.c - gestion de l'architecture x86
+ *
+ * Copyright (C) 2008 Cyrille Bagard
+ *
+ *  This file is part of OpenIDA.
+ *
+ *  OpenIDA is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  OpenIDA is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with Foobar.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#include "processor.h"
+
+
+#include "../processor-int.h"
+#include "instruction.h"
+#include "opcodes.h"
+
+
+#include <malloc.h>
+
+
+
+typedef asm_x86_instr * (* read_instr) (const char *, off_t *, off_t);
+
+
+/* Carte d'identité d'un opcode */
+typedef struct _x86_opcode
+{
+    char opcode;                        /* Opcode + préfixe eventuel   */
+    const char *name;                       /* Désignation humaine         */
+    read_instr read;                        /* Décodage de l'instruction   */
+
+} x86_opcode;
+
+
+#define register_opcode(target, bin, n, func) \
+do {\
+target.opcode = bin;   \
+target.name = n; \
+target.read = func; \
+} while (0)
+
+
+/* Définition générique d'une architecture */
+typedef struct _asm_x86_processor
+{
+    asm_processor base;                     /* A laisser en premier...     */
+
+    x86_opcode opcodes[X86_OP_COUNT];       /* Liste des opcodes supportés */
+
+} asm_x86_processor;
+
+
+
+
+
+/* Enregistre toutes les instructions reconnues pour x86. */
+void x86_register_instructions(asm_x86_processor *);
+
+
+/* Décode une instruction dans un flux de données. */
+asm_instr *x86_fetch_instruction(const asm_x86_processor *, const char *, off_t *, off_t);
+
+/* Traduit une instruction en version humainement lisible. */
+void x86_print_instruction(const asm_x86_processor *, const asm_x86_instr *, char *, size_t, AsmSyntax);
+
+
+
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : -                                                            *
+*                                                                             *
+*  Description : Crée le support de l'architecture x86.                       *
+*                                                                             *
+*  Retour      : Architecture mise en place.                                  *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+asm_processor *create_x86_processor(void)
+{
+    asm_x86_processor *result;              /* Architecture à retourner    */
+
+    result = (asm_x86_processor *)calloc(1, sizeof(asm_x86_processor));
+
+    x86_register_instructions(result);
+
+    ASM_PROCESSOR(result)->fetch_instr = x86_fetch_instruction;
+    ASM_PROCESSOR(result)->print_instr = x86_print_instruction;
+
+    return ASM_PROCESSOR(result);
+
+}
+
+
+
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : proc = architecture visée par la procédure.                  *
+*                                                                             *
+*  Description : Enregistre toutes les instructions reconnues pour x86.       *
+*                                                                             *
+*  Retour      : -                                                            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+void x86_register_instructions(asm_x86_processor *proc)
+{
+
+
+
+    register_opcode(proc->opcodes[X86_OP_INT], 0xcd, "int", read_instr_int);
+
+
+
+
+
+}
+
+
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : proc = architecture visée par la procédure.                  *
+*                data = flux de données à analyser.                           *
+*                pos  = position courante dans ce flux. [OUT]                 *
+*                len  = taille totale des données à analyser.                 *
+*                                                                             *
+*  Description : Décode une instruction dans un flux de données.              *
+*                                                                             *
+*  Retour      : Instruction mise en place ou NULL.                           *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+asm_instr *x86_fetch_instruction(const asm_x86_processor *proc, const char *data, off_t *pos, off_t len)
+{
+    asm_x86_instr *result;                  /* Résultat à faire remonter   */
+    X86Opcodes i;                           /* Boucle de parcours          */
+
+    result = NULL;
+
+    //printf("--------\n");
+
+    for (i = 0; i < X86_OP_COUNT; i++)
+    {
+
+        /*
+        printf(" cmp :: 0x%02hhx vs 0x%02hhx ? %d\n",
+               data[*pos], proc->opcodes[i].opcode,
+               data[*pos] == proc->opcodes[i].opcode);
+        */
+
+        if (data[*pos] == proc->opcodes[i].opcode)
+        {
+            result = proc->opcodes[i].read(data, pos, len);
+            if (result != NULL) result->type = i;
+            break;
+        }
+
+    }
+
+
+    return ASM_INSTRUCTION(result);
+
+}
+
+
+/******************************************************************************
+*                                                                             *
+*  Paramètres  : proc   = architecture visée par la procédure.                *
+*                instr  = instruction à traiter.                              *
+*                buffer = tampon de sortie mis à disposition. [OUT]           *
+*                len    = taille de ce tampon.                                *
+*                syntax = type de représentation demandée.                    *
+*                                                                             *
+*  Description : Traduit une instruction en version humainement lisible.      *
+*                                                                             *
+*  Retour      : -                                                            *
+*                                                                             *
+*  Remarques   : -                                                            *
+*                                                                             *
+******************************************************************************/
+
+void x86_print_instruction(const asm_x86_processor *proc, const asm_x86_instr *instr, char *buffer, size_t len, AsmSyntax syntax)
+{
+
+    if (ASM_INSTRUCTION(instr)->opcode == DB_OPCODE)
+
+
+    snprintf(buffer, len, "db\t0x%02hhx", ASM_INSTRUCTION(instr)->operands[0].value.val8);
+
+
+        else
+
+    snprintf(buffer, len, "%s\t0x%02hhx", proc->opcodes[instr->type].name, ASM_INSTRUCTION(instr)->operands[0].value.val8);
+
+
+}
+
+
+
+
+
+
+
diff --git a/src/arch/x86/processor.h b/src/arch/x86/processor.h
new file mode 100644
index 0000000..0bd587d
--- /dev/null
+++ b/src/arch/x86/processor.h
@@ -0,0 +1,42 @@
+
+/* OpenIDA - Outil d'analyse de fichiers binaires
+ * processor.h - prototypes pour la gestion de l'architecture x86
+ *
+ * Copyright (C) 2008 Cyrille Bagard
+ *
+ *  This file is part of OpenIDA.
+ *
+ *  OpenIDA is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  OpenIDA is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with Foobar.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#ifndef _ARCH_X86_PROCESSOR_H
+#define _ARCH_X86_PROCESSOR_H
+
+
+#include "../instruction.h"
+#include "../processor.h"
+
+
+
+/* Crée le support de l'architecture x86. */
+asm_processor *create_x86_processor(void);
+
+
+
+
+
+
+
+#endif  /* _ARCH_X86_PROCESSOR_H */