1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
|
/* Chrysalide - Outil d'analyse de fichiers binaires
* core.c - intégration du support du format ELF
*
* Copyright (C) 2017 Cyrille Bagard
*
* This file is part of Chrysalide.
*
* Chrysalide is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 3 of the License, or
* (at your option) any later version.
*
* Chrysalide is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with Chrysalide. If not, see <http://www.gnu.org/licenses/>.
*/
#include "core.h"
#include <core/global.h>
#include <plugins/plugin-def.h>
#include "format.h"
#include "python/module.h"
DEFINE_CHRYSALIDE_PLUGIN("elf", "Add support for the ELF format", "0.1.0",
RL("PyChrysalide"), AL(PGA_PLUGIN_INIT, PGA_CONTENT_RESOLVER));
/******************************************************************************
* *
* Paramètres : plugin = greffon à manipuler. *
* *
* Description : Prend acte du chargement du greffon. *
* *
* Retour : - *
* *
* Remarques : - *
* *
******************************************************************************/
G_MODULE_EXPORT bool chrysalide_plugin_init(GPluginModule *plugin)
{
bool result; /* Bilan à retourner */
result = register_format_matcher(elf_is_matching, NULL);
if (result)
result = register_format_loader("elf", "Executable and Linkable Format", g_elf_format_new);
if (result)
result = add_format_elf_module_to_python_module();
return result;
}
/******************************************************************************
* *
* Paramètres : plugin = greffon à manipuler. *
* action = type d'action attendue. *
* content = contenu binaire à traiter. *
* gid = identifiant du groupe de traitement. *
* status = barre de statut à tenir informée. *
* *
* Description : Procède à une opération liée à un contenu binaire. *
* *
* Retour : - *
* *
* Remarques : - *
* *
******************************************************************************/
G_MODULE_EXPORT void chrysalide_plugin_handle_binary_content(const GPluginModule *plugin, PluginAction action, GBinContent *content, gid_t gid, GtkStatusStack *status)
{
vmpa2t addr; /* Tête de lecture initiale */
bool test; /* Bilan des accès mémoire */
char magic[SELFMAG]; /* Idenfiant standard */
GExeFormat *format; /* Format ELF reconnu */
GLoadedContent *loaded; /* Représentation chargée */
GContentResolver *resolver; /* Resolveur de contenus */
init_vmpa(&addr, 0, VMPA_NO_VIRTUAL);
test = g_binary_content_read_raw(content, &addr, SELFMAG, (bin_t *)magic);
if (test)
test = (memcmp(magic, ELFMAG, SELFMAG) == 0);
if (test)
{
format = g_elf_format_new(content);
loaded = g_loaded_binary_new(format);
resolver = get_current_content_resolver();
g_content_resolver_add_detected(resolver, gid, loaded);
g_object_unref(G_OBJECT(resolver));
}
}
|
