analysis_java.c File Reference

#include <rz_types.h>
#include <rz_lib.h>
#include <rz_analysis.h>
#include "../../asm/arch/java/jvm.h"

Go to the source code of this file.

Classes
struct	java_analysis_context_t

Typedefs
typedef struct java_analysis_context_t	JavaAnalysisContext

Functions
static void	update_context (JavaAnalysisContext *ctx)
static int	java_analysis (RzAnalysis *analysis, RzAnalysisOp *op, ut64 addr, const ut8 *buf, int len, RzAnalysisOpMask mask)
static char *	get_reg_profile (RzAnalysis *analysis)
static int	archinfo (RzAnalysis *analysis, int query)
static bool	java_init (void **user)
static bool	java_fini (void *user)

Variables
RzAnalysisPlugin	rz_analysis_plugin_java
RZ_API RzLibStruct	rizin_plugin

Typedef Documentation

JavaAnalysisContext

typedef struct java_analysis_context_t JavaAnalysisContext

Function Documentation

archinfo()

static int archinfo ( RzAnalysis *  analysis, int  query  )

static

Definition at line 131 of file analysis_java.c.

                                                     {
    if (query == RZ_ANALYSIS_ARCHINFO_MIN_OP_SIZE) {
        return 1;
    } else if (query == RZ_ANALYSIS_ARCHINFO_MAX_OP_SIZE) {
        return 16;
    }
    return 0;
}

References RZ_ANALYSIS_ARCHINFO_MAX_OP_SIZE, and RZ_ANALYSIS_ARCHINFO_MIN_OP_SIZE.

get_reg_profile()

static char* get_reg_profile ( RzAnalysis *  analysis )

static

Definition at line 114 of file analysis_java.c.

                                                   {
    const char *p =
        "=PC    pc\n"
        "=SP    garbage\n"
        "=SR    garbage\n"
        "=A0    garbage\n"
        "=A1    garbage\n"
        "=A2    garbage\n"
        "=A3    garbage\n"
        "=A4    garbage\n"
        "=A5    garbage\n"
        "=A6    garbage\n"
        "gpr    pc      .32 0  0\n"
        "gpr    garbage .32 32 0\n";
    return strdup(p);
}

References p, and strdup().

java_analysis()

static int java_analysis ( RzAnalysis *  analysis, RzAnalysisOp *  op, ut64  addr, const ut8 *  buf, int  len, RzAnalysisOpMask  mask  )

static

Definition at line 27 of file analysis_java.c.

                                                                                                                            {
    JavaAnalysisContext *ctx = (JavaAnalysisContext *)analysis->plugin_data;
 
    switch (ctx->switchop) {
    case BYTECODE_AA_TABLESWITCH:
        if (len < 4) {
            RZ_LOG_ERROR("[!] java_analysis: no enough data for lookupswitch case.\n");
            return -1;
        }
        op->size = 4;
        op->jump = ctx->pc + rz_read_be32(buf);
        op->fail = addr + op->size;
        op->type = RZ_ANALYSIS_OP_TYPE_CJMP;
        update_context(ctx);
        return op->size;
    case BYTECODE_AB_LOOKUPSWITCH:
        if (len < 8) {
            RZ_LOG_ERROR("[!] java_analysis: no enough data for lookupswitch case.\n");
            return -1;
        }
        op->size = 8;
        op->jump = ctx->pc + rz_read_at_be32(buf, 4);
        op->fail = addr + op->size;
        op->type = RZ_ANALYSIS_OP_TYPE_CJMP;
        update_context(ctx);
        return op->size;
    default:
        break;
    }
 
    JavaVM vm = { 0 };
    Bytecode bc = { 0 };
 
    ut64 section = addr;
    if (analysis->binb.bin) {
        const RzBinSection *sec = analysis->binb.get_vsect_at(analysis->binb.bin, addr);
        if (sec) {
            section = sec->paddr;
        }
    }
 
    if (!jvm_init(&vm, buf, len, addr, section)) {
        RZ_LOG_ERROR("[!] java_analysis: bad or invalid data.\n");
        return -1;
    }
 
    op->fail = UT64_MAX;
    op->jump = UT64_MAX;
    op->size = 1;
    if (jvm_fetch(&vm, &bc)) {
        op->size = bc.size;
        op->type = bc.atype;
        switch (bc.atype) {
        case RZ_ANALYSIS_OP_TYPE_CALL:
        case RZ_ANALYSIS_OP_TYPE_JMP:
            op->jump = bc.pc + bc.args[0];
            break;
        case RZ_ANALYSIS_OP_TYPE_CJMP:
            op->jump = bc.pc + bc.args[0];
            op->fail = addr + bc.size;
            break;
        case RZ_ANALYSIS_OP_TYPE_RET:
        case RZ_ANALYSIS_OP_TYPE_ILL:
            op->eob = true;
            break;
        default:
            break;
        }
        if (bc.opcode == BYTECODE_AA_TABLESWITCH) {
            ctx->switchop = BYTECODE_AA_TABLESWITCH;
            ctx->ts = *((TableSwitch *)bc.extra);
            ctx->count = 0;
            ctx->pc = addr;
        } else if (bc.opcode == BYTECODE_AB_LOOKUPSWITCH) {
            ctx->switchop = BYTECODE_AB_LOOKUPSWITCH;
            ctx->ls = *((LookupSwitch *)bc.extra);
            ctx->count = 0;
            ctx->pc = addr;
        }
        bytecode_clean(&bc);
    } else {
        RZ_LOG_ERROR("[!] java_analysis: jvm fetch failed.\n");
        return -1;
    }
    return op->size;
}

References addr, bytecode_t::args, bytecode_t::atype, rz_bin_bind_t::bin, rz_analysis_t::binb, BYTECODE_AA_TABLESWITCH, BYTECODE_AB_LOOKUPSWITCH, bytecode_clean(), bytecode_t::extra, rz_bin_bind_t::get_vsect_at, jvm_fetch(), jvm_init(), len, bytecode_t::opcode, rz_bin_section_t::paddr, bytecode_t::pc, rz_analysis_t::plugin_data, RZ_ANALYSIS_OP_TYPE_CALL, RZ_ANALYSIS_OP_TYPE_CJMP, RZ_ANALYSIS_OP_TYPE_ILL, RZ_ANALYSIS_OP_TYPE_JMP, RZ_ANALYSIS_OP_TYPE_RET, RZ_LOG_ERROR, rz_read_at_be32(), rz_read_be32(), bytecode_t::size, update_context(), ut64(), and UT64_MAX.

java_fini()

static bool java_fini ( void *  user )

static

Definition at line 149 of file analysis_java.c.

                                  {
    if (!user) {
        return false;
    }
    free(user);
    return true;
}

References free().

java_init()

static bool java_init ( void **  user )

static

Definition at line 140 of file analysis_java.c.

                                   {
    JavaAnalysisContext *ctx = RZ_NEW0(JavaAnalysisContext);
    if (!ctx) {
        return false;
    }
    *user = ctx;
    return true;
}

References RZ_NEW0.

update_context()

static void update_context ( JavaAnalysisContext *  ctx )

static

Definition at line 18 of file analysis_java.c.

                                                     {
    ctx->count++;
    if (ctx->switchop == BYTECODE_AA_TABLESWITCH && ctx->count > ctx->ts.length) {
        ctx->switchop = BYTECODE_00_NOP;
    } else if (ctx->switchop == BYTECODE_AB_LOOKUPSWITCH && ctx->count > ctx->ls.npairs) {
        ctx->switchop = BYTECODE_00_NOP;
    }
}

References BYTECODE_00_NOP, BYTECODE_AA_TABLESWITCH, and BYTECODE_AB_LOOKUPSWITCH.

Referenced by java_analysis().

Variable Documentation

rizin_plugin

RZ_API RzLibStruct rizin_plugin

Initial value:

= {
    .type = RZ_LIB_TYPE_ANALYSIS,
    .data = &rz_analysis_plugin_java,
    .version = RZ_VERSION
}

Definition at line 171 of file analysis_java.c.

rz_analysis_plugin_java

RzAnalysisPlugin rz_analysis_plugin_java

Initial value:

= {
    .name = "java",
    .desc = "Java analysis plugin",
    .arch = "java",
    .license = "LGPL3",
    .bits = 32,
    .op = &java_analysis,
    .archinfo = archinfo,
    .init = java_init,
    .fini = java_fini,
    .get_reg_profile = &get_reg_profile,
}

Definition at line 157 of file analysis_java.c.