1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
/* Chrysalide - Outil d'analyse de fichiers binaires
* exit.c - définition des sorties comme points de non retour
*
* Copyright (C) 2015 Cyrille Bagard
*
* This file is part of Chrysalide.
*
* OpenIDA is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 3 of the License, or
* (at your option) any later version.
*
* OpenIDA is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with Foobar. If not, see <http://www.gnu.org/licenses/>.
*/
#include "exit.h"
/* Modifie toutes les instructions appelant exit(). */
static void mark_one_kind_of_exit_as_return(const GLoadedBinary *, const char *);
/******************************************************************************
* *
* Paramètres : binary = binaire dont le contenu est en cours de traitement. *
* *
* Description : Modifie toutes les instructions appelant exit(). *
* *
* Retour : - *
* *
* Remarques : - *
* *
******************************************************************************/
static void mark_one_kind_of_exit_as_return(const GLoadedBinary *binary, const char *fname)
{
GBinFormat *format; /* Format du fichier binaire */
GBinSymbol *symbol; /* Symbole de fonction trouvé */
const mrange_t *range; /* Emplacement du symbole */
GArchProcessor *proc; /* Architecture du binaire */
GArchInstruction *instr; /* Instruction de sortie */
instr_link_t *sources; /* Instructions diverses liées */
size_t count; /* Nbre de sources affichées */
size_t i; /* Boucle de parcours */
format = G_BIN_FORMAT(g_loaded_binary_get_format(binary));
if (!g_binary_format_find_symbol_by_label(format, fname, &symbol))
goto mokoear_exit;
if (g_binary_symbol_get_target_type(symbol) != STP_ROUTINE)
goto mokoear_done_with_sym;
range = g_binary_symbol_get_range(symbol);
proc = g_loaded_binary_get_processor(binary);
instr = g_arch_processor_find_instr_by_address(proc, get_mrange_addr(range));
g_arch_instruction_rlock_src(instr);
count = g_arch_instruction_get_sources(instr, &sources);
for (i = 0; i < count; i++)
{
if (sources[i].type != ILT_CALL) continue;
g_arch_instruction_set_flag(sources[i].linked, AIF_RETURN_POINT);
}
g_arch_instruction_runlock_src(instr);
g_object_unref(G_OBJECT(proc));
mokoear_done_with_sym:
g_object_unref(G_OBJECT(symbol));
mokoear_exit:
//g_object_unref(G_OBJECT(format));
;
}
/******************************************************************************
* *
* Paramètres : binary = binaire dont le contenu est en cours de traitement. *
* *
* Description : Modifie toutes les instructions appelant exit(). *
* *
* Retour : - *
* *
* Remarques : - *
* *
******************************************************************************/
void mark_exit_calls_as_return_instructions(const GLoadedBinary *binary)
{
const char **iter; /* Boucle de parcours */
static const char *exit_functions[] = {
"exit",
"_exit",
"_Exit",
NULL
};
for (iter = exit_functions; *iter != NULL; iter++)
mark_one_kind_of_exit_as_return(binary, *iter);
}
|
