csign.c File Reference

#include <rz_core.h>
#include <rz_flirt.h>

Go to the source code of this file.

Classes
struct	map_string_value_t

Typedefs
typedef struct map_string_value_t	MapStringValue

Functions
RZ_API ut8	rz_core_flirt_arch_from_name (RZ_NONNULL const char *arch)
	Returns the FLIRT arch id from a given arch name Returns RZ_FLIRT_SIG_ARCH_ANY if name is not found. More...
RZ_API const char *	rz_core_flirt_arch_from_id (ut8 arch)
	Returns the FLIRT arch name (string format) from a given arch id Returns "unknown" if name is not found. More...
RZ_API ut32	rz_core_flirt_file_from_option_list (RZ_NONNULL const char *file_list)
	Returns the FLIRT file flags from a given list (comma spaced) of file types Returns RZ_FLIRT_SIG_FILE_ALL if file_list is "any" and 0 if no valid value is not found. More...
RZ_API ut16	rz_core_flirt_os_from_option_list (RZ_NONNULL const char *os_list)
	Returns the FLIRT file flags from a given list (comma spaced) of file types Returns RZ_FLIRT_SIG_OS_ALL if file_list is "any" and 0 if no valid value is not found. More...
RZ_API ut16	rz_core_flirt_app_from_option_list (RZ_NONNULL const char *app_list)
	Returns the FLIRT file flags from a given list (comma spaced) of file types Returns RZ_FLIRT_SIG_APP_ALL if file_list is "any" and 0 if no valid value is not found. More...
static void	flirt_print_module (const RzFlirtModule *module)
static void	flirt_print_node_pattern (const RzFlirtNode *node)
static void	flirt_print_indentation (int indent)
static void	flirt_print_node (const RzFlirtNode *node, int indent)
RZ_API bool	rz_core_flirt_dump_file (RZ_NONNULL const char *flirt_file)
	Dumps the contents of a FLIRT file. More...
RZ_API bool	rz_core_flirt_create_file (RZ_NONNULL RzCore *core, RZ_NONNULL const char *output_file, RZ_NULLABLE ut32 *written_nodes)
	Generates a new FLIRT file from a given RzCore structure. More...
RZ_API bool	rz_core_flirt_convert_file (RZ_NONNULL RzCore *core, RZ_NONNULL const char *input_file, RZ_NONNULL const char *output_file)
	converts a FLIRT file to the other format. More...

Variables
const MapStringValue	arch_map [29]
const MapStringValue	file_map [25]
const MapStringValue	os_map [6]
const MapStringValue	app_map [10]

Typedef Documentation

MapStringValue

typedef struct map_string_value_t MapStringValue

Function Documentation

flirt_print_indentation()

static void flirt_print_indentation ( int  indent )

static

Definition at line 338 of file csign.c.

                                                {
    rz_cons_printf("%s", rz_str_pad(' ', indent));
}

References rz_cons_printf(), and rz_str_pad().

Referenced by flirt_print_node().

flirt_print_module()

static void flirt_print_module ( const RzFlirtModule *  module )

static

Definition at line 287 of file csign.c.

                                                            {
    RzListIter *pub_func_it, *ref_func_it, *tail_bytes_it;
    RzFlirtFunction *func, *ref_func;
    RzFlirtTailByte *tail_byte;
 
    rz_cons_printf("%02X %04X %04X ", module->crc_length, module->crc16, module->length);
    rz_list_foreach (module->public_functions, pub_func_it, func) {
        if (func->is_local || func->is_collision) {
            rz_cons_printf("(");
            if (func->is_local) {
                rz_cons_printf("l");
            }
            if (func->is_collision) {
                rz_cons_printf("!");
            }
            rz_cons_printf(")");
        }
        rz_cons_printf("%04X:%s", func->offset, func->name);
        if (pub_func_it->n) {
            rz_cons_printf(" ");
        }
    }
    if (module->tail_bytes) {
        rz_list_foreach (module->tail_bytes, tail_bytes_it, tail_byte) {
            rz_cons_printf(" (%04X: %02X)", tail_byte->offset, tail_byte->value);
        }
    }
    if (module->referenced_functions) {
        rz_cons_printf(" (REF ");
        rz_list_foreach (module->referenced_functions, ref_func_it, ref_func) {
            rz_cons_printf("%04X: %s", ref_func->offset, ref_func->name);
            if (ref_func_it->n) {
                rz_cons_printf(" ");
            }
        }
        rz_cons_printf(")");
    }
    rz_cons_printf("\n");
}

References rz_flirt_function_t::is_collision, rz_flirt_function_t::is_local, rz_list_iter_t::n, rz_flirt_function_t::name, rz_flirt_tail_byte_t::offset, rz_flirt_function_t::offset, rz_cons_printf(), and rz_flirt_tail_byte_t::value.

Referenced by flirt_print_node().

flirt_print_node()

static void flirt_print_node ( const RzFlirtNode *  node, int  indent  )

static

Definition at line 342 of file csign.c.

                                                                  {
    /* Prints a signature node. The output is similar to dumpsig */
    RzListIter *child_it, *module_it;
    RzFlirtNode *child;
    RzFlirtModule *module;
 
    if (node->pattern_bytes) { // avoid printing the root node
        flirt_print_indentation(indent);
        flirt_print_node_pattern(node);
    }
    if (node->child_list) {
        rz_list_foreach (node->child_list, child_it, child) {
            flirt_print_node(child, indent + 1);
        }
    } else if (node->module_list) {
        ut32 i = 0;
        rz_list_foreach (node->module_list, module_it, module) {
            flirt_print_indentation(indent + 1);
            rz_cons_printf("%d. ", i);
            flirt_print_module(module);
            i++;
        }
    }
}

References rz_flirt_node_t::child_list, flirt_print_indentation(), flirt_print_module(), flirt_print_node_pattern(), i, rz_flirt_node_t::module_list, rz_flirt_node_t::pattern_bytes, and rz_cons_printf().

Referenced by rz_core_flirt_dump_file().

flirt_print_node_pattern()

static void flirt_print_node_pattern ( const RzFlirtNode *  node )

static

Definition at line 327 of file csign.c.

                                                              {
    for (ut32 i = 0; i < node->length; i++) {
        if (node->pattern_mask[i]) {
            rz_cons_printf("%02X", node->pattern_bytes[i]);
        } else {
            rz_cons_printf("..");
        }
    }
    rz_cons_printf(":\n");
}

References i, rz_flirt_node_t::length, rz_flirt_node_t::pattern_bytes, rz_flirt_node_t::pattern_mask, and rz_cons_printf().

Referenced by flirt_print_node().

rz_core_flirt_app_from_option_list()

RZ_API ut16 rz_core_flirt_app_from_option_list

(

RZ_NONNULL const char *

app_list

)

Returns the FLIRT file flags from a given list (comma spaced) of file types Returns RZ_FLIRT_SIG_APP_ALL if file_list is "any" and 0 if no valid value is not found.

Parameters

app_list

The app list to convert to flags

Returns

The FLIRT app flags.

Definition at line 258 of file csign.c.

                                                                                {
    rz_return_val_if_fail(RZ_STR_ISNOTEMPTY(app_list), 0);
    ut32 flags = 0;
    const char *tk;
    RzListIter *it;
    RzList *tokens = NULL;
 
    if (strstr(app_list, "all")) {
        return RZ_FLIRT_SIG_APP_ALL;
    }
 
    tokens = rz_str_split_duplist(app_list, ",", true);
    if (!tokens) {
        RZ_LOG_ERROR("cannot allocate token list\n");
        return 0;
    }
 
    rz_list_foreach (tokens, it, tk) {
        for (ut32 i = 0; i < RZ_ARRAY_SIZE(app_map); ++i) {
            if (strcmp(tk, app_map[i].name)) {
                continue;
            }
            flags |= app_map[i].value;
        }
    }
    rz_list_free(tokens);
    return flags;
}

References app_map, flags, i, NULL, RZ_ARRAY_SIZE, RZ_FLIRT_SIG_APP_ALL, rz_list_free(), RZ_LOG_ERROR, rz_return_val_if_fail, RZ_STR_ISNOTEMPTY, rz_str_split_duplist(), and map_string_value_t::value.

rz_core_flirt_arch_from_id()

RZ_API const char* rz_core_flirt_arch_from_id

(

ut8

arch

)

Returns the FLIRT arch name (string format) from a given arch id Returns "unknown" if name is not found.

Parameters

arch	The arch to convert to string

Returns

The FLIRT arch name.

Definition at line 168 of file csign.c.

                                                        {
    for (ut32 i = 0; i < RZ_ARRAY_SIZE(arch_map); ++i) {
        if (arch != arch_map[i].value) {
            continue;
        }
        return arch_map[i].name;
    }
 
    return "unknown";
}

References arch, arch_map, i, map_string_value_t::name, RZ_ARRAY_SIZE, and value.

Referenced by rz_core_flirt_dump_file().

rz_core_flirt_arch_from_name()

RZ_API ut8 rz_core_flirt_arch_from_name

(

RZ_NONNULL const char *

arch

)

Returns the FLIRT arch id from a given arch name Returns RZ_FLIRT_SIG_ARCH_ANY if name is not found.

Parameters

arch	The arch to convert to id

Returns

The FLIRT arch id.

Definition at line 148 of file csign.c.

                                                                     {
    rz_return_val_if_fail(RZ_STR_ISNOTEMPTY(arch), RZ_FLIRT_SIG_ARCH_ANY);
 
    for (ut32 i = 0; i < RZ_ARRAY_SIZE(arch_map); ++i) {
        if (strcmp(arch, arch_map[i].name)) {
            continue;
        }
        return arch_map[i].value;
    }
 
    return RZ_FLIRT_SIG_ARCH_ANY;
}

References arch, arch_map, i, RZ_ARRAY_SIZE, RZ_FLIRT_SIG_ARCH_ANY, rz_return_val_if_fail, RZ_STR_ISNOTEMPTY, and map_string_value_t::value.

Referenced by rz_core_analysis_sigdb_apply(), rz_core_flirt_convert_file(), rz_core_flirt_create_file(), and rz_flirt_scan_handler().

rz_core_flirt_convert_file()

RZ_API bool rz_core_flirt_convert_file	(	RZ_NONNULL RzCore *	core,
		RZ_NONNULL const char *	input_file,
		RZ_NONNULL const char *	output_file
	)

converts a FLIRT file to the other format.

Parameters

input_file	Input file
output_file	Output file
optimize	Optimization value (expects an RZ_FLIRT_NODE_OPTIMIZE_* value)

Returns

true on success, false on failure

Definition at line 510 of file csign.c.

                                                                                                                                       {
    rz_return_val_if_fail(core && RZ_STR_ISNOTEMPTY(input_file) && RZ_STR_ISNOTEMPTY(output_file), false);
 
    const char *in_extension = rz_str_lchr(input_file, '.');
    if (RZ_STR_ISEMPTY(in_extension) || (strcmp(in_extension, ".sig") != 0 && strcmp(in_extension, ".pat") != 0)) {
        RZ_LOG_ERROR("FLIRT: unknown input extension '%s'\n", in_extension);
        return false;
    }
 
    const char *out_extension = rz_str_lchr(output_file, '.');
    if (RZ_STR_ISEMPTY(out_extension) || (strcmp(out_extension, ".sig") != 0 && strcmp(out_extension, ".pat") != 0)) {
        RZ_LOG_ERROR("FLIRT: unknown output extension '%s'\n", out_extension);
        return false;
    }
 
    if (!strcmp(out_extension, in_extension)) {
        RZ_LOG_ERROR("FLIRT: cannot convert '%s' to '%s' because the format is the same\n", input_file, output_file);
        return false;
    }
 
    RzBuffer *buffer = NULL;
    RzFlirtNode *node = NULL;
 
    ut64 optimize = rz_config_get_i(core->config, "flirt.node.optimize");
    if (optimize > RZ_FLIRT_NODE_OPTIMIZE_MAX) {
        RZ_LOG_ERROR("config 'flirt.node.optimize' is set to an invalid value.\n");
        return false;
    }
 
    if (!(buffer = rz_buf_new_slurp(input_file))) {
        RZ_LOG_ERROR("FLIRT: cannot open %s (read mode)\n", input_file);
        return false;
    } else if (!strcmp(in_extension, ".pat")) {
        node = rz_sign_flirt_parse_string_pattern_from_buffer(buffer, optimize, NULL);
    } else {
        node = rz_sign_flirt_parse_compressed_pattern_from_buffer(buffer, RZ_FLIRT_SIG_ARCH_ANY, NULL);
    }
    rz_buf_free(buffer);
 
    if (!node) {
        RZ_LOG_ERROR("FLIRT: we encountered an error while parsing the file. Sorry.\n");
        return false;
    }
 
    bool result = false;
    if (!(buffer = rz_buf_new_file(output_file, O_RDWR | O_CREAT | O_TRUNC, 0644))) {
        RZ_LOG_ERROR("FLIRT: cannot open %s (write mode)\n", output_file);
        return false;
    } else if (!strcmp(out_extension, ".pat")) {
        result = rz_sign_flirt_write_string_pattern_to_buffer(node, buffer);
    } else {
        ut64 hdr_version = rz_config_get_i(core->config, "flirt.sig.version");
        const char *hdr_arch = rz_config_get(core->config, "asm.arch");
        const char *hdr_file = rz_config_get(core->config, "flirt.sig.file");
        const char *hdr_os = rz_config_get(core->config, "flirt.sig.os");
        const char *hdr_lib = rz_config_get(core->config, "flirt.sig.library");
        bool deflate = rz_config_get_b(core->config, "flirt.sig.deflate");
        ut8 architecture = rz_core_flirt_arch_from_name(hdr_arch);
 
        if (RZ_STR_ISEMPTY(hdr_lib)) {
            RZ_LOG_WARN("config 'flirt.sig.library' is empty. using default value '" RZ_FLIRT_LIBRARY_NAME_DFL "'\n");
            hdr_lib = RZ_FLIRT_LIBRARY_NAME_DFL;
        } else if (architecture >= RZ_FLIRT_SIG_ARCH_ANY) {
            RZ_LOG_ERROR("FLIRT: architecture '%s' is not supported as .sig file, we suggest to use the .pat format.\n", hdr_arch);
            RZ_LOG_ERROR("FLIRT: we suggest to open an issue to discuss with the rizin team about it.\n");
            result = false;
            goto fail;
        }
 
        RzFlirtCompressedOptions options = {
            .version = hdr_version,
            .arch = architecture,
            .file = rz_core_flirt_file_from_option_list(hdr_file),
            .os = rz_core_flirt_os_from_option_list(hdr_os),
            .app = RZ_FLIRT_SIG_APP_ALL,
            .deflate = deflate,
            .libname = hdr_lib,
        };
        result = rz_sign_flirt_write_compressed_pattern_to_buffer(node, buffer, &options);
    }
 
fail:
    rz_buf_free(buffer);
    rz_sign_flirt_node_free(node);
    return result;
}

References deflate(), fail, NULL, O_CREAT, O_RDWR, O_TRUNC, options, rz_buf_free(), rz_buf_new_file(), rz_buf_new_slurp(), rz_config_get(), rz_config_get_b(), rz_config_get_i(), rz_core_flirt_arch_from_name(), rz_core_flirt_file_from_option_list(), rz_core_flirt_os_from_option_list(), RZ_FLIRT_LIBRARY_NAME_DFL, RZ_FLIRT_NODE_OPTIMIZE_MAX, RZ_FLIRT_SIG_APP_ALL, RZ_FLIRT_SIG_ARCH_ANY, RZ_LOG_ERROR, RZ_LOG_WARN, rz_return_val_if_fail, rz_sign_flirt_node_free(), rz_sign_flirt_parse_compressed_pattern_from_buffer(), rz_sign_flirt_parse_string_pattern_from_buffer(), rz_sign_flirt_write_compressed_pattern_to_buffer(), rz_sign_flirt_write_string_pattern_to_buffer(), RZ_STR_ISEMPTY, RZ_STR_ISNOTEMPTY, rz_str_lchr(), and ut64().

Referenced by rz_main_rz_sign().

rz_core_flirt_create_file()

RZ_API bool rz_core_flirt_create_file	(	RZ_NONNULL RzCore *	core,
		RZ_NONNULL const char *	output_file,
		RZ_NULLABLE ut32 *	written_nodes
	)

Generates a new FLIRT file from a given RzCore structure.

Parameters

core	RzCore to use.
output_file	Output file.
written_nodes	When not NULL, returns the number of nodes written in the file.

Returns

true on success, false on failure

Definition at line 431 of file csign.c.

                                                                                                                                    {
    rz_return_val_if_fail(core && RZ_STR_ISNOTEMPTY(output_file), false);
 
    const char *extension = rz_str_lchr(output_file, '.');
    if (RZ_STR_ISEMPTY(extension) || (strcmp(extension, ".sig") != 0 && strcmp(extension, ".pat") != 0)) {
        RZ_LOG_ERROR("missing or unknown extension '%s'. supported only .pat and .sig\n", extension);
        return false;
    }
 
    ut64 optimize = rz_config_get_i(core->config, "flirt.node.optimize");
    if (optimize > RZ_FLIRT_NODE_OPTIMIZE_MAX) {
        RZ_LOG_ERROR("config 'flirt.node.optimize' is set to an invalid value.\n");
        return false;
    }
 
    RzFlirtNode *node = rz_sign_flirt_node_new(core->analysis, optimize);
    if (!node) {
        return false;
    }
 
    RzBuffer *buffer = rz_buf_new_file(output_file, O_RDWR | O_CREAT | O_TRUNC, 0644);
    if (!buffer) {
        RZ_LOG_ERROR("cannot create file '%s'\n", output_file);
        return false;
    }
 
    bool result = false;
    if (!strcmp(extension, ".pat")) {
        result = rz_sign_flirt_write_string_pattern_to_buffer(node, buffer);
    } else if (!strcmp(extension, ".sig")) {
        ut64 hdr_version = rz_config_get_i(core->config, "flirt.sig.version");
        const char *hdr_arch = rz_config_get(core->config, "asm.arch");
        const char *hdr_file = rz_config_get(core->config, "flirt.sig.file");
        const char *hdr_os = rz_config_get(core->config, "flirt.sig.os");
        const char *hdr_lib = rz_config_get(core->config, "flirt.sig.library");
        bool deflate = rz_config_get_b(core->config, "flirt.sig.deflate");
        ut8 architecture = rz_core_flirt_arch_from_name(hdr_arch);
 
        if (RZ_STR_ISEMPTY(hdr_lib)) {
            RZ_LOG_WARN("config 'flirt.sig.library' is empty. using default value '" RZ_FLIRT_LIBRARY_NAME_DFL "'\n");
            hdr_lib = RZ_FLIRT_LIBRARY_NAME_DFL;
        } else if (architecture >= RZ_FLIRT_SIG_ARCH_ANY) {
            RZ_LOG_ERROR("FLIRT: architecture '%s' is not supported as .sig file, we suggest to use the .pat format.\n", hdr_arch);
            RZ_LOG_ERROR("FLIRT: we suggest to open an issue to discuss with the rizin team about it.\n");
            result = false;
            goto fail;
        }
 
        RzFlirtCompressedOptions options = {
            .version = hdr_version,
            .arch = rz_core_flirt_arch_from_name(hdr_arch),
            .file = rz_core_flirt_file_from_option_list(hdr_file),
            .os = rz_core_flirt_os_from_option_list(hdr_os),
            .app = RZ_FLIRT_SIG_APP_ALL,
            .deflate = deflate,
            .libname = hdr_lib,
        };
        result = rz_sign_flirt_write_compressed_pattern_to_buffer(node, buffer, &options);
    }
 
    if (written_nodes) {
        *written_nodes = rz_sign_flirt_node_count_nodes(node);
    }
 
fail:
    rz_buf_free(buffer);
    rz_sign_flirt_node_free(node);
    return result;
}

References deflate(), fail, O_CREAT, O_RDWR, O_TRUNC, options, rz_buf_free(), rz_buf_new_file(), rz_config_get(), rz_config_get_b(), rz_config_get_i(), rz_core_flirt_arch_from_name(), rz_core_flirt_file_from_option_list(), rz_core_flirt_os_from_option_list(), RZ_FLIRT_LIBRARY_NAME_DFL, RZ_FLIRT_NODE_OPTIMIZE_MAX, RZ_FLIRT_SIG_APP_ALL, RZ_FLIRT_SIG_ARCH_ANY, RZ_LOG_ERROR, RZ_LOG_WARN, rz_return_val_if_fail, rz_sign_flirt_node_count_nodes(), rz_sign_flirt_node_free(), rz_sign_flirt_node_new(), rz_sign_flirt_write_compressed_pattern_to_buffer(), rz_sign_flirt_write_string_pattern_to_buffer(), RZ_STR_ISEMPTY, RZ_STR_ISNOTEMPTY, rz_str_lchr(), and ut64().

Referenced by rz_flirt_create_handler(), and rz_main_rz_sign().

rz_core_flirt_dump_file()

RZ_API bool rz_core_flirt_dump_file

(

RZ_NONNULL const char *

flirt_file

)

Dumps the contents of a FLIRT file.

Parameters

flirt_file

FLIRT file name to dump

Definition at line 372 of file csign.c.

                                                                       {
    rz_return_val_if_fail(RZ_STR_ISNOTEMPTY(flirt_file), false);
 
    const char *extension = rz_str_lchr(flirt_file, '.');
    if (RZ_STR_ISEMPTY(extension) || (strcmp(extension, ".sig") != 0 && strcmp(extension, ".pat") != 0)) {
        RZ_LOG_ERROR("FLIRT: unknown extension '%s'\n", extension);
        return false;
    }
 
    RzFlirtInfo info = { 0 };
    RzBuffer *buffer = NULL;
    RzFlirtNode *node = NULL;
 
    if (!(buffer = rz_buf_new_slurp(flirt_file))) {
        RZ_LOG_ERROR("FLIRT: cannot open %s (read mode)\n", flirt_file);
        return false;
    } else if (!strcmp(extension, ".pat")) {
        node = rz_sign_flirt_parse_string_pattern_from_buffer(buffer, RZ_FLIRT_NODE_OPTIMIZE_NORMAL, &info);
    } else {
        node = rz_sign_flirt_parse_compressed_pattern_from_buffer(buffer, RZ_FLIRT_SIG_ARCH_ANY, &info);
    }
    rz_buf_free(buffer);
 
    if (!node) {
        RZ_LOG_ERROR("FLIRT: we encountered an error while parsing the file. Sorry.\n");
        return false;
    }
 
    switch (info.type) {
    case RZ_FLIRT_FILE_TYPE_SIG:
        rz_cons_printf("SIG format\n");
        rz_cons_printf("Signature:    %s, %u modules\n", info.u.sig.name ? info.u.sig.name : "", info.u.sig.n_modules);
        rz_cons_printf("Version:      %u\n", info.u.sig.version);
        rz_cons_printf("Architecture: %u (%s)\n", info.u.sig.architecture, rz_core_flirt_arch_from_id(info.u.sig.architecture));
        break;
    case RZ_FLIRT_FILE_TYPE_PAT:
        rz_cons_printf("PAT format\n");
        rz_cons_printf("Signature:    %u modules\n", info.u.pat.n_modules);
        break;
    default:
        rz_warn_if_reached();
        break;
    }
 
    flirt_print_node(node, -1);
    rz_sign_flirt_node_free(node);
    rz_sign_flirt_info_fini(&info);
    return true;
}

References flirt_print_node(), info(), NULL, rz_buf_free(), rz_buf_new_slurp(), rz_cons_printf(), rz_core_flirt_arch_from_id(), RZ_FLIRT_FILE_TYPE_PAT, RZ_FLIRT_FILE_TYPE_SIG, RZ_FLIRT_NODE_OPTIMIZE_NORMAL, RZ_FLIRT_SIG_ARCH_ANY, RZ_LOG_ERROR, rz_return_val_if_fail, rz_sign_flirt_info_fini(), rz_sign_flirt_node_free(), rz_sign_flirt_parse_compressed_pattern_from_buffer(), rz_sign_flirt_parse_string_pattern_from_buffer(), RZ_STR_ISEMPTY, RZ_STR_ISNOTEMPTY, rz_str_lchr(), rz_warn_if_reached, and rz_bin_info_t::type.

Referenced by rz_flirt_dump_handler(), and rz_main_rz_sign().

rz_core_flirt_file_from_option_list()

RZ_API ut32 rz_core_flirt_file_from_option_list

(

RZ_NONNULL const char *

file_list

)

Returns the FLIRT file flags from a given list (comma spaced) of file types Returns RZ_FLIRT_SIG_FILE_ALL if file_list is "any" and 0 if no valid value is not found.

Parameters

file_list

The file list to convert to flags

Returns

The FLIRT file flags.

Definition at line 186 of file csign.c.

                                                                                  {
    rz_return_val_if_fail(RZ_STR_ISNOTEMPTY(file_list), 0);
    ut32 flags = 0;
    const char *tk;
    RzListIter *it;
    RzList *tokens = NULL;
 
    if (strstr(file_list, "all")) {
        return RZ_FLIRT_SIG_FILE_ALL;
    }
 
    tokens = rz_str_split_duplist(file_list, ",", true);
    if (!tokens) {
        RZ_LOG_ERROR("cannot allocate token list\n");
        return 0;
    }
 
    rz_list_foreach (tokens, it, tk) {
        for (ut32 i = 0; i < RZ_ARRAY_SIZE(file_map); ++i) {
            if (strcmp(tk, file_map[i].name)) {
                continue;
            }
            flags |= file_map[i].value;
        }
    }
    rz_list_free(tokens);
    return flags;
}

References file_map, flags, i, NULL, RZ_ARRAY_SIZE, RZ_FLIRT_SIG_FILE_ALL, rz_list_free(), RZ_LOG_ERROR, rz_return_val_if_fail, RZ_STR_ISNOTEMPTY, rz_str_split_duplist(), and map_string_value_t::value.

Referenced by rz_core_flirt_convert_file(), and rz_core_flirt_create_file().

rz_core_flirt_os_from_option_list()

RZ_API ut16 rz_core_flirt_os_from_option_list

(

RZ_NONNULL const char *

os_list

)

Returns the FLIRT file flags from a given list (comma spaced) of file types Returns RZ_FLIRT_SIG_OS_ALL if file_list is "any" and 0 if no valid value is not found.

Parameters

os_list

The os list to convert to flags

Returns

The FLIRT os flags.

Definition at line 222 of file csign.c.

                                                                              {
    rz_return_val_if_fail(RZ_STR_ISNOTEMPTY(os_list), 0);
    ut32 flags = 0;
    const char *tk;
    RzListIter *it;
    RzList *tokens = NULL;
 
    if (strstr(os_list, "all")) {
        return RZ_FLIRT_SIG_OS_ALL;
    }
 
    tokens = rz_str_split_duplist(os_list, ",", true);
    if (!tokens) {
        RZ_LOG_ERROR("cannot allocate token list\n");
        return 0;
    }
 
    rz_list_foreach (tokens, it, tk) {
        for (ut32 i = 0; i < RZ_ARRAY_SIZE(os_map); ++i) {
            if (strcmp(tk, os_map[i].name)) {
                continue;
            }
            flags |= os_map[i].value;
        }
    }
    rz_list_free(tokens);
    return flags;
}

References flags, i, NULL, os_map, RZ_ARRAY_SIZE, RZ_FLIRT_SIG_OS_ALL, rz_list_free(), RZ_LOG_ERROR, rz_return_val_if_fail, RZ_STR_ISNOTEMPTY, rz_str_split_duplist(), and map_string_value_t::value.

Referenced by rz_core_flirt_convert_file(), and rz_core_flirt_create_file().

Variable Documentation

app_map

const MapStringValue app_map[10]

Initial value:

= {
    { "console", RZ_FLIRT_SIG_APP_CONSOLE },
    { "graphics", RZ_FLIRT_SIG_APP_GRAPHICS },
    { "exe", RZ_FLIRT_SIG_APP_EXE },
    { "dll", RZ_FLIRT_SIG_APP_DLL },
    { "drv", RZ_FLIRT_SIG_APP_DRV },
    { "thread:single", RZ_FLIRT_SIG_APP_SINGLE_THREADED },
    { "thread:multi", RZ_FLIRT_SIG_APP_MULTI_THREADED },
    { "16bit", RZ_FLIRT_SIG_APP_16_BIT },
    { "32bit", RZ_FLIRT_SIG_APP_32_BIT },
    { "64bit", RZ_FLIRT_SIG_APP_64_BIT },
}

Definition at line 128 of file csign.c.

Referenced by rz_core_flirt_app_from_option_list().

arch_map

const MapStringValue arch_map[29]

Definition at line 14 of file csign.c.

Referenced by rz_core_flirt_arch_from_id(), and rz_core_flirt_arch_from_name().

file_map

const MapStringValue file_map[25]

Initial value:

= {
    { "dos:exe:old", RZ_FLIRT_SIG_FILE_DOS_EXE_OLD },
    { "dos:com:old", RZ_FLIRT_SIG_FILE_DOS_COM_OLD },
    { "bin", RZ_FLIRT_SIG_FILE_BIN },
    { "dosdrv", RZ_FLIRT_SIG_FILE_DOSDRV },
    { "ne", RZ_FLIRT_SIG_FILE_NE },
    { "intelhex", RZ_FLIRT_SIG_FILE_INTELHEX },
    { "moshex", RZ_FLIRT_SIG_FILE_MOSHEX },
    { "lx", RZ_FLIRT_SIG_FILE_LX },
    { "le", RZ_FLIRT_SIG_FILE_LE },
    { "nlm", RZ_FLIRT_SIG_FILE_NLM },
    { "coff", RZ_FLIRT_SIG_FILE_COFF },
    { "pe", RZ_FLIRT_SIG_FILE_PE },
    { "omf", RZ_FLIRT_SIG_FILE_OMF },
    { "srec", RZ_FLIRT_SIG_FILE_SREC },
    { "zip", RZ_FLIRT_SIG_FILE_ZIP },
    { "omflib", RZ_FLIRT_SIG_FILE_OMFLIB },
    { "ar", RZ_FLIRT_SIG_FILE_AR },
    { "loader", RZ_FLIRT_SIG_FILE_LOADER },
    { "elf", RZ_FLIRT_SIG_FILE_ELF },
    { "w32run", RZ_FLIRT_SIG_FILE_W32RUN },
    { "aout", RZ_FLIRT_SIG_FILE_AOUT },
    { "pilot", RZ_FLIRT_SIG_FILE_PILOT },
    { "dos:exe", RZ_FLIRT_SIG_FILE_DOS_EXE },
    { "dos:com", RZ_FLIRT_SIG_FILE_DOS_COM },
    { "aixar", RZ_FLIRT_SIG_FILE_AIXAR },
}

Definition at line 91 of file csign.c.

Referenced by rz_core_flirt_file_from_option_list().

os_map

const MapStringValue os_map[6]

Initial value:

= {
    { "msdos", RZ_FLIRT_SIG_OS_MSDOS },
    { "win", RZ_FLIRT_SIG_OS_WIN },
    { "os2", RZ_FLIRT_SIG_OS_OS2 },
    { "netware", RZ_FLIRT_SIG_OS_NETWARE },
    { "unix", RZ_FLIRT_SIG_OS_UNIX },
    { "other", RZ_FLIRT_SIG_OS_OTHER },
}

Definition at line 119 of file csign.c.

Referenced by rz_core_flirt_os_from_option_list().