summaryrefslogtreecommitdiff
path: root/src/arch/x86
diff options
context:
space:
mode:
authorCyrille Bagard <nocbos@gmail.com>2008-07-26 23:46:10 (GMT)
committerCyrille Bagard <nocbos@gmail.com>2008-07-26 23:46:10 (GMT)
commitdbf4d1f93e54251568854bff0ebc9c84f60857f6 (patch)
tree72fa507ada7ba5b7351f711a7f16a8d3f7d32524 /src/arch/x86
parentc4f9b35d4ccb5bb82c4927daddd34d7a828bff3c (diff)
Parsed x86 binary data and displayed the result.
git-svn-id: svn://svn.gna.org/svn/chrysalide/trunk@6 abbe820e-26c8-41b2-8c08-b7b2b41f8b0a
Diffstat (limited to 'src/arch/x86')
-rw-r--r--src/arch/x86/Makefile.am20
-rw-r--r--src/arch/x86/instruction.h65
-rw-r--r--src/arch/x86/op_int.c63
-rw-r--r--src/arch/x86/opcodes.h40
-rw-r--r--src/arch/x86/processor.c228
-rw-r--r--src/arch/x86/processor.h42
6 files changed, 458 insertions, 0 deletions
diff --git a/src/arch/x86/Makefile.am b/src/arch/x86/Makefile.am
new file mode 100644
index 0000000..6fe55c8
--- /dev/null
+++ b/src/arch/x86/Makefile.am
@@ -0,0 +1,20 @@
+
+lib_LIBRARIES = libarchx86.a
+
+libarchx86_a_SOURCES = \
+ instruction.h \
+ op_int.c \
+ opcodes.h \
+ processor.h processor.c
+
+libarchx86_a_CFLAGS = $(AM_CFLAGS)
+
+
+INCLUDES =
+
+AM_CPPFLAGS =
+
+AM_CFLAGS = $(DEBUG_CFLAGS) $(WARNING_FLAGS)
+
+
+SUBDIRS =
diff --git a/src/arch/x86/instruction.h b/src/arch/x86/instruction.h
new file mode 100644
index 0000000..47617ea
--- /dev/null
+++ b/src/arch/x86/instruction.h
@@ -0,0 +1,65 @@
+
+/* OpenIDA - Outil d'analyse de fichiers binaires
+ * instruction.h - prototypes pour la gestion des instructions de l'architecture x86
+ *
+ * Copyright (C) 2008 Cyrille Bagard
+ *
+ * This file is part of OpenIDA.
+ *
+ * OpenIDA is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * OpenIDA is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with Foobar. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#ifndef _ARCH_X86_INSTRUCTION_H
+#define _ARCH_X86_INSTRUCTION_H
+
+
+#include "../instruction.h"
+#include "../instruction-int.h"
+
+
+
+/* Définition d'une instruction x86 */
+typedef struct _asm_x86_instr asm_x86_instr;
+
+
+
+/* Enumération de tous les opcodes */
+typedef enum _X86Opcodes
+{
+ X86_OP_INT, /* int (0xcd) */
+
+
+ X86_OP_COUNT
+
+} X86Opcodes;
+
+
+
+
+/* Définition d'une instruction x86 */
+struct _asm_x86_instr
+{
+ asm_instr base; /* A laisser en premier... */
+
+ X86Opcodes type;
+
+};
+
+
+
+
+
+
+#endif /* _ARCH_X86_INSTRUCTION_H */
diff --git a/src/arch/x86/op_int.c b/src/arch/x86/op_int.c
new file mode 100644
index 0000000..e7805e1
--- /dev/null
+++ b/src/arch/x86/op_int.c
@@ -0,0 +1,63 @@
+
+/* OpenIDA - Outil d'analyse de fichiers binaires
+ * op_int.c - décodage des instructions d'interruption
+ *
+ * Copyright (C) 2008 Cyrille Bagard
+ *
+ * This file is part of OpenIDA.
+ *
+ * OpenIDA is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * OpenIDA is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with Foobar. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#include <malloc.h>
+
+
+#include "instruction.h"
+#include "../instruction-int.h"
+
+
+
+
+/******************************************************************************
+* *
+* Paramètres : data = flux de données à analyser. *
+* pos = position courante dans ce flux. [OUT] *
+* len = taille totale des données à analyser. *
+* *
+* Description : Décode une instruction de type 'int'. *
+* *
+* Retour : Instruction mise en place ou NULL. *
+* *
+* Remarques : - *
+* *
+******************************************************************************/
+
+asm_x86_instr *read_instr_int(const char *data, off_t *pos, off_t len)
+{
+ asm_x86_instr *result;
+
+ result = (asm_x86_instr *)calloc(1, sizeof(asm_x86_instr));
+
+ ASM_INSTRUCTION(result)->opcode = data[(*pos)++];
+
+ /* TODO: check result */
+ fill_db_operand(&ASM_INSTRUCTION(result)->operands[0], data[(*pos)++]);
+
+ ASM_INSTRUCTION(result)->operands_count = 1;
+
+ return result;
+
+}
+
diff --git a/src/arch/x86/opcodes.h b/src/arch/x86/opcodes.h
new file mode 100644
index 0000000..17316e7
--- /dev/null
+++ b/src/arch/x86/opcodes.h
@@ -0,0 +1,40 @@
+
+/* OpenIDA - Outil d'analyse de fichiers binaires
+ * opcodes.h - prototypes pour la liste de tous les opcodes de l'architecture x86
+ *
+ * Copyright (C) 2008 Cyrille Bagard
+ *
+ * This file is part of OpenIDA.
+ *
+ * OpenIDA is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * OpenIDA is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with Foobar. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#ifndef _ARCH_X86_OPCODES_H
+#define _ARCH_X86_OPCODES_H
+
+
+#include <sys/types.h>
+
+
+#include "../instruction.h"
+
+
+
+/* Décode une instruction de type 'int'. */
+asm_x86_instr *read_instr_int(const char *, off_t *, off_t);
+
+
+
+#endif /* _ARCH_X86_OPCODES_H */
diff --git a/src/arch/x86/processor.c b/src/arch/x86/processor.c
new file mode 100644
index 0000000..4ef1377
--- /dev/null
+++ b/src/arch/x86/processor.c
@@ -0,0 +1,228 @@
+
+/* OpenIDA - Outil d'analyse de fichiers binaires
+ * processor.c - gestion de l'architecture x86
+ *
+ * Copyright (C) 2008 Cyrille Bagard
+ *
+ * This file is part of OpenIDA.
+ *
+ * OpenIDA is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * OpenIDA is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with Foobar. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#include "processor.h"
+
+
+#include "../processor-int.h"
+#include "instruction.h"
+#include "opcodes.h"
+
+
+#include <malloc.h>
+
+
+
+typedef asm_x86_instr * (* read_instr) (const char *, off_t *, off_t);
+
+
+/* Carte d'identité d'un opcode */
+typedef struct _x86_opcode
+{
+ char opcode; /* Opcode + préfixe eventuel */
+ const char *name; /* Désignation humaine */
+ read_instr read; /* Décodage de l'instruction */
+
+} x86_opcode;
+
+
+#define register_opcode(target, bin, n, func) \
+do {\
+target.opcode = bin; \
+target.name = n; \
+target.read = func; \
+} while (0)
+
+
+/* Définition générique d'une architecture */
+typedef struct _asm_x86_processor
+{
+ asm_processor base; /* A laisser en premier... */
+
+ x86_opcode opcodes[X86_OP_COUNT]; /* Liste des opcodes supportés */
+
+} asm_x86_processor;
+
+
+
+
+
+/* Enregistre toutes les instructions reconnues pour x86. */
+void x86_register_instructions(asm_x86_processor *);
+
+
+/* Décode une instruction dans un flux de données. */
+asm_instr *x86_fetch_instruction(const asm_x86_processor *, const char *, off_t *, off_t);
+
+/* Traduit une instruction en version humainement lisible. */
+void x86_print_instruction(const asm_x86_processor *, const asm_x86_instr *, char *, size_t, AsmSyntax);
+
+
+
+
+
+/******************************************************************************
+* *
+* Paramètres : - *
+* *
+* Description : Crée le support de l'architecture x86. *
+* *
+* Retour : Architecture mise en place. *
+* *
+* Remarques : - *
+* *
+******************************************************************************/
+
+asm_processor *create_x86_processor(void)
+{
+ asm_x86_processor *result; /* Architecture à retourner */
+
+ result = (asm_x86_processor *)calloc(1, sizeof(asm_x86_processor));
+
+ x86_register_instructions(result);
+
+ ASM_PROCESSOR(result)->fetch_instr = x86_fetch_instruction;
+ ASM_PROCESSOR(result)->print_instr = x86_print_instruction;
+
+ return ASM_PROCESSOR(result);
+
+}
+
+
+
+
+
+/******************************************************************************
+* *
+* Paramètres : proc = architecture visée par la procédure. *
+* *
+* Description : Enregistre toutes les instructions reconnues pour x86. *
+* *
+* Retour : - *
+* *
+* Remarques : - *
+* *
+******************************************************************************/
+
+void x86_register_instructions(asm_x86_processor *proc)
+{
+
+
+
+ register_opcode(proc->opcodes[X86_OP_INT], 0xcd, "int", read_instr_int);
+
+
+
+
+
+}
+
+
+
+
+/******************************************************************************
+* *
+* Paramètres : proc = architecture visée par la procédure. *
+* data = flux de données à analyser. *
+* pos = position courante dans ce flux. [OUT] *
+* len = taille totale des données à analyser. *
+* *
+* Description : Décode une instruction dans un flux de données. *
+* *
+* Retour : Instruction mise en place ou NULL. *
+* *
+* Remarques : - *
+* *
+******************************************************************************/
+
+asm_instr *x86_fetch_instruction(const asm_x86_processor *proc, const char *data, off_t *pos, off_t len)
+{
+ asm_x86_instr *result; /* Résultat à faire remonter */
+ X86Opcodes i; /* Boucle de parcours */
+
+ result = NULL;
+
+ //printf("--------\n");
+
+ for (i = 0; i < X86_OP_COUNT; i++)
+ {
+
+ /*
+ printf(" cmp :: 0x%02hhx vs 0x%02hhx ? %d\n",
+ data[*pos], proc->opcodes[i].opcode,
+ data[*pos] == proc->opcodes[i].opcode);
+ */
+
+ if (data[*pos] == proc->opcodes[i].opcode)
+ {
+ result = proc->opcodes[i].read(data, pos, len);
+ if (result != NULL) result->type = i;
+ break;
+ }
+
+ }
+
+
+ return ASM_INSTRUCTION(result);
+
+}
+
+
+/******************************************************************************
+* *
+* Paramètres : proc = architecture visée par la procédure. *
+* instr = instruction à traiter. *
+* buffer = tampon de sortie mis à disposition. [OUT] *
+* len = taille de ce tampon. *
+* syntax = type de représentation demandée. *
+* *
+* Description : Traduit une instruction en version humainement lisible. *
+* *
+* Retour : - *
+* *
+* Remarques : - *
+* *
+******************************************************************************/
+
+void x86_print_instruction(const asm_x86_processor *proc, const asm_x86_instr *instr, char *buffer, size_t len, AsmSyntax syntax)
+{
+
+ if (ASM_INSTRUCTION(instr)->opcode == DB_OPCODE)
+
+
+ snprintf(buffer, len, "db\t0x%02hhx", ASM_INSTRUCTION(instr)->operands[0].value.val8);
+
+
+ else
+
+ snprintf(buffer, len, "%s\t0x%02hhx", proc->opcodes[instr->type].name, ASM_INSTRUCTION(instr)->operands[0].value.val8);
+
+
+}
+
+
+
+
+
+
+
diff --git a/src/arch/x86/processor.h b/src/arch/x86/processor.h
new file mode 100644
index 0000000..0bd587d
--- /dev/null
+++ b/src/arch/x86/processor.h
@@ -0,0 +1,42 @@
+
+/* OpenIDA - Outil d'analyse de fichiers binaires
+ * processor.h - prototypes pour la gestion de l'architecture x86
+ *
+ * Copyright (C) 2008 Cyrille Bagard
+ *
+ * This file is part of OpenIDA.
+ *
+ * OpenIDA is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * OpenIDA is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with Foobar. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#ifndef _ARCH_X86_PROCESSOR_H
+#define _ARCH_X86_PROCESSOR_H
+
+
+#include "../instruction.h"
+#include "../processor.h"
+
+
+
+/* Crée le support de l'architecture x86. */
+asm_processor *create_x86_processor(void);
+
+
+
+
+
+
+
+#endif /* _ARCH_X86_PROCESSOR_H */