dyldcache.h File Reference

#include <rz_util.h>
#include <set.h>
#include "mach0.h"

Go to the source code of this file.

Classes
struct	rz_dyld_rebase_info_t
struct	rz_dyld_rebase_infos_entry_t
struct	rz_dyld_rebase_infos_t
struct	rz_dyld_rebase_info_3_t
struct	rz_dyld_rebase_info_2_t
struct	rz_dyld_rebase_info_1_t
struct	rz_dyld_loc_sym_t
struct	rz_bin_dyld_image_t
struct	rz_dyldcache_t

Macros
#define	RZ_BIN_MACH064   1

Typedefs
typedef struct rz_dyld_rebase_info_t	RzDyldRebaseInfo
typedef struct rz_dyld_rebase_infos_entry_t	RzDyldRebaseInfosEntry
typedef struct rz_dyld_rebase_infos_t	RzDyldRebaseInfos
typedef struct rz_dyld_rebase_info_3_t	RzDyldRebaseInfo3
typedef struct rz_dyld_rebase_info_2_t	RzDyldRebaseInfo2
typedef struct rz_dyld_rebase_info_1_t	RzDyldRebaseInfo1
typedef struct rz_dyld_loc_sym_t	RzDyldLocSym
typedef struct rz_bin_dyld_image_t	RzDyldBinImage
typedef struct rz_dyldcache_t	RzDyldCache

Functions
RZ_API bool	rz_dyldcache_check_magic (const char *magic)
RZ_API RzDyldCache *	rz_dyldcache_new_buf (RzBuffer *buf)
RZ_API void	rz_dyldcache_free (RzDyldCache *cache)
RZ_API ut64	rz_dyldcache_va2pa (RzDyldCache *cache, uint64_t vaddr, ut32 *offset, ut32 *left)
RZ_API ut64	rz_dyldcache_get_slide (RzDyldCache *cache)
RZ_API objc_cache_opt_info *	rz_dyldcache_get_objc_opt_info (RzBinFile *bf, RzDyldCache *cache)
RZ_API void	rz_dyldcache_symbols_from_locsym (RzDyldCache *cache, RzDyldBinImage *bin, RzList *symbols, SetU *hash)
RZ_API RzBuffer *	rz_dyldcache_new_rebasing_buf (RzDyldCache *cache)
RZ_API bool	rz_dyldcache_needs_rebasing (RzDyldCache *cache)
RZ_API bool	rz_dyldcache_range_needs_rebasing (RzDyldCache *cache, ut64 paddr, ut64 size)

Macro Definition Documentation

RZ_BIN_MACH064

#define RZ_BIN_MACH064   1

Definition at line 11 of file dyldcache.h.

Typedef Documentation

RzDyldBinImage

typedef struct rz_bin_dyld_image_t RzDyldBinImage

RzDyldCache

typedef struct rz_dyldcache_t RzDyldCache

RzDyldLocSym

typedef struct rz_dyld_loc_sym_t RzDyldLocSym

RzDyldRebaseInfo

typedef struct rz_dyld_rebase_info_t RzDyldRebaseInfo

RzDyldRebaseInfo1

typedef struct rz_dyld_rebase_info_1_t RzDyldRebaseInfo1

RzDyldRebaseInfo2

typedef struct rz_dyld_rebase_info_2_t RzDyldRebaseInfo2

RzDyldRebaseInfo3

typedef struct rz_dyld_rebase_info_3_t RzDyldRebaseInfo3

RzDyldRebaseInfos

typedef struct rz_dyld_rebase_infos_t RzDyldRebaseInfos

RzDyldRebaseInfosEntry

typedef struct rz_dyld_rebase_infos_entry_t RzDyldRebaseInfosEntry

Function Documentation

rz_dyldcache_check_magic()

RZ_API bool rz_dyldcache_check_magic

(

const char *

magic

)

Parameters

magic

zero-terminated string from the beginning of some file

Definition at line 18 of file dyldcache.c.

                                                        {
    return !strcmp(magic, "dyld_v1   arm64") || !strcmp(magic, "dyld_v1  arm64e") || !strcmp(magic, "dyld_v1  x86_64") || !strcmp(magic, "dyld_v1 x86_64h");
}

Referenced by check_buffer(), and read_cache_header().

rz_dyldcache_free()

RZ_API void rz_dyldcache_free

(

RzDyldCache *

cache

)

Definition at line 1325 of file dyldcache.c.

                                                  {
    if (!cache) {
        return;
    }
 
    rz_list_free(cache->bins);
    cache->bins = NULL;
    rz_buf_free(cache->buf);
    cache->buf = NULL;
    if (cache->rebase_infos) {
        int i;
        for (i = 0; i < cache->rebase_infos->length; i++) {
            rebase_info_free(cache->rebase_infos->entries[i].info);
            cache->rebase_infos->entries[i].info = NULL;
        }
        RZ_FREE(cache->rebase_infos->entries);
        RZ_FREE(cache->rebase_infos);
    }
    free(cache->hdr);
    free(cache->maps);
    free(cache->maps_index);
    free(cache->hdr_offset);
    free(cache->accel);
    free(cache->locsym);
    free(cache->oi);
    free(cache);
}

References rz_dyldcache_t::accel, rz_dyldcache_t::bins, rz_dyldcache_t::buf, rz_dyld_rebase_infos_t::entries, free(), rz_dyldcache_t::hdr, rz_dyldcache_t::hdr_offset, i, rz_dyld_rebase_infos_entry_t::info, rz_dyld_rebase_infos_t::length, rz_dyldcache_t::locsym, rz_dyldcache_t::maps, rz_dyldcache_t::maps_index, NULL, rz_dyldcache_t::oi, rebase_info_free(), rz_dyldcache_t::rebase_infos, rz_buf_free(), RZ_FREE, and rz_list_free().

Referenced by destroy(), and rz_dyldcache_new_buf().

rz_dyldcache_get_objc_opt_info()

RZ_API objc_cache_opt_info* rz_dyldcache_get_objc_opt_info	(	RzBinFile *	bf,
		RzDyldCache *	cache
	)

Definition at line 247 of file dyldcache.c.

                                                                                              {
    objc_cache_opt_info *result = NULL;
    RzListIter *iter;
    RzDyldBinImage *bin;
    rz_list_foreach (cache->bins, iter, bin) {
        if (strcmp(bin->file, "lib/libobjc.A.dylib")) {
            continue;
        }
 
        struct MACH0_(opts_t) opts = { 0 };
        opts.verbose = bf->rbin->verbose;
        opts.header_at = bin->header_at;
 
        struct MACH0_(obj_t) *mach0 = MACH0_(new_buf)(cache->buf, &opts);
        if (!mach0) {
            goto beach;
        }
 
        struct section_t *sections = NULL;
        if (!(sections = MACH0_(get_sections)(mach0))) {
            MACH0_(mach0_free)
            (mach0);
            goto beach;
        }
 
        int i;
        ut64 scoffs_offset = 0;
        ut64 scoffs_size = 0;
        ut64 slide = rz_dyldcache_get_slide(cache);
        for (i = 0; !sections[i].last; i++) {
            if (sections[i].size == 0) {
                continue;
            }
            if (strstr(sections[i].name, "__objc_scoffs")) {
                scoffs_offset = va2pa(sections[i].addr, cache->n_maps, cache->maps, cache->buf, slide, NULL, NULL);
                scoffs_size = sections[i].size;
                break;
            }
        }
 
        MACH0_(mach0_free)
        (mach0);
        RZ_FREE(sections);
 
        if (!scoffs_offset || scoffs_size < 40) {
            break;
        }
        ut64 check;
        if (!rz_buf_read_le64_at(cache->buf, scoffs_offset, &check) || check != 2) {
            break;
        }
        ut64 sel_string_base;
        if (!rz_buf_read_le64_at(cache->buf, scoffs_offset + 8, &sel_string_base)) {
            break;
        }
        ut64 sel_string_end;
        if (!rz_buf_read_le64_at(cache->buf, scoffs_offset + 16, &sel_string_end) || sel_string_end == sel_string_base) {
            break;
        }
        result = RZ_NEW0(objc_cache_opt_info);
        if (!result) {
            break;
        }
        result->sel_string_base = sel_string_base;
    }
beach:
    return result;
}

References addr, rz_dyldcache_t::bins, rz_dyldcache_t::buf, check, get_sections(), i, MACH0_, mach0_free(), rz_dyldcache_t::maps, rz_dyldcache_t::n_maps, NULL, rz_bin_file_t::rbin, rz_buf_read_le64_at, rz_dyldcache_get_slide(), RZ_FREE, RZ_NEW0, sections(), objc_cache_opt_info::sel_string_base, ut64(), va2pa(), and rz_bin_t::verbose.

Referenced by classes().

rz_dyldcache_get_slide()

RZ_API ut64 rz_dyldcache_get_slide

(

RzDyldCache *

cache

)

Definition at line 1097 of file dyldcache.c.

                                                       {
    rz_return_val_if_fail(cache, 0);
    if (!cache->rebase_infos || !cache->rebase_infos->length) {
        return 0;
    }
 
    size_t i;
    for (i = 0; i < cache->rebase_infos->length; i++) {
        if (cache->rebase_infos->entries[i].info) {
            return cache->rebase_infos->entries[i].info->slide;
        }
    }
 
    return 0;
}

References rz_dyld_rebase_infos_t::entries, i, rz_dyld_rebase_infos_entry_t::info, rz_dyld_rebase_infos_t::length, rz_dyldcache_t::rebase_infos, rz_return_val_if_fail, and rz_dyld_rebase_info_t::slide.

Referenced by header(), maps(), rz_dyldcache_get_objc_opt_info(), rz_dyldcache_needs_rebasing(), rz_dyldcache_symbols_from_locsym(), rz_dyldcache_va2pa(), sections(), and symbols().

rz_dyldcache_needs_rebasing()

RZ_API bool rz_dyldcache_needs_rebasing

(

RzDyldCache *

cache

)

Definition at line 284 of file dyldcache_rebase.c.

                                                            {
    rz_return_val_if_fail(cache, false);
    if (cache->rebase_infos) {
        if (!rz_dyldcache_get_slide(cache)) {
            return true;
        }
    }
    return false;
}

References rz_dyldcache_t::rebase_infos, rz_dyldcache_get_slide(), and rz_return_val_if_fail.

Referenced by classes(), rz_dyldcache_range_needs_rebasing(), and virtual_files().

rz_dyldcache_new_buf()

RZ_API RzDyldCache* rz_dyldcache_new_buf

(

RzBuffer *

buf

)

Definition at line 1170 of file dyldcache.c.

                                                        {
    RzDyldCache *cache = RZ_NEW0(RzDyldCache);
    if (!cache) {
        return NULL;
    }
    memcpy(cache->magic, "dyldcac", 7);
    cache->buf = rz_buf_ref(buf);
    populate_cache_headers(cache);
    if (!cache->hdr) {
        goto cupertino;
    }
    populate_cache_maps(cache);
    if (!cache->maps) {
        goto cupertino;
    }
    cache->accel = read_cache_accel(cache->buf, cache->hdr, cache->maps);
    cache->bins = create_cache_bins(cache);
    if (!cache->bins) {
        goto cupertino;
    }
    cache->locsym = rz_dyld_locsym_new(cache);
    cache->rebase_infos = get_rebase_infos(cache);
    return cache;
cupertino:
    rz_dyldcache_free(cache);
    return NULL;
}

References rz_dyldcache_t::accel, rz_dyldcache_t::bins, rz_dyldcache_t::buf, create_cache_bins(), get_rebase_infos(), rz_dyldcache_t::hdr, rz_dyldcache_t::locsym, rz_dyldcache_t::magic, rz_dyldcache_t::maps, memcpy(), NULL, populate_cache_headers(), populate_cache_maps(), read_cache_accel(), rz_dyldcache_t::rebase_infos, rz_buf_ref(), rz_dyld_locsym_new(), rz_dyldcache_free(), and RZ_NEW0.

Referenced by load_buffer().

rz_dyldcache_new_rebasing_buf()

RZ_API RzBuffer* rz_dyldcache_new_rebasing_buf

(

RzDyldCache *

cache

)

Definition at line 279 of file dyldcache_rebase.c.

                                                                   {
    rz_return_val_if_fail(cache, NULL);
    return rz_buf_new_with_methods(&buf_methods, cache);
}

References buf_methods, NULL, rz_buf_new_with_methods(), and rz_return_val_if_fail.

Referenced by classes(), and virtual_files().

rz_dyldcache_range_needs_rebasing()

RZ_API bool rz_dyldcache_range_needs_rebasing	(	RzDyldCache *	cache,
		ut64	paddr,
		ut64	size
	)

Definition at line 294 of file dyldcache_rebase.c.

                                                                                         {
    rz_return_val_if_fail(cache, false);
    if (!rz_dyldcache_needs_rebasing(cache)) {
        return false;
    }
    return !!rebase_info_by_range(cache->rebase_infos, paddr, size);
}

References rebase_info_by_range(), rz_dyldcache_t::rebase_infos, rz_dyldcache_needs_rebasing(), and rz_return_val_if_fail.

Referenced by maps().

rz_dyldcache_symbols_from_locsym()

RZ_API void rz_dyldcache_symbols_from_locsym	(	RzDyldCache *	cache,
		RzDyldBinImage *	bin,
		RzList *	symbols,
		SetU *	hash
	)

Definition at line 1113 of file dyldcache.c.

                                                                                                                   {
    RzDyldLocSym *locsym = cache->locsym;
    if (!locsym) {
        return;
    }
 
    if (bin->nlist_start_index >= locsym->nlists_count ||
        bin->nlist_start_index + bin->nlist_count > locsym->nlists_count) {
        RZ_LOG_ERROR("dyldcache: malformed local symbol entry\n");
        return;
    }
 
    ut64 nlists_size = sizeof(struct MACH0_(nlist)) * bin->nlist_count;
    struct MACH0_(nlist) *nlists = RZ_NEWS0(struct MACH0_(nlist), bin->nlist_count);
    if (!nlists) {
        return;
    }
    ut64 nlists_offset = locsym->local_symbols_offset + locsym->nlists_offset +
        bin->nlist_start_index * sizeof(struct MACH0_(nlist));
    if (rz_buf_fread_at(cache->buf, nlists_offset, (ut8 *)nlists, "iccsl", bin->nlist_count) != nlists_size) {
        free(nlists);
        return;
    }
 
    ut32 j;
    for (j = 0; j != bin->nlist_count; j++) {
        struct MACH0_(nlist) *nlist = &nlists[j];
        if (set_u_contains(hash, (ut64)nlist->n_value)) {
            continue;
        }
        set_u_add(hash, (ut64)nlist->n_value);
        if (nlist->n_strx >= locsym->strings_size) {
            continue;
        }
        RzBinSymbol *sym = RZ_NEW0(RzBinSymbol);
        if (!sym) {
            break;
        }
        sym->type = "LOCAL";
        sym->vaddr = nlist->n_value;
        ut64 slide = rz_dyldcache_get_slide(cache);
        sym->paddr = va2pa(nlist->n_value, cache->n_maps, cache->maps, cache->buf, slide, NULL, NULL);
 
        char *symstr = rz_buf_get_string(cache->buf, locsym->local_symbols_offset + locsym->strings_offset + nlist->n_strx);
        if (symstr) {
            sym->name = symstr;
        } else {
            static ut32 k = 0;
            sym->name = rz_str_newf("unk_local%d", k++);
        }
 
        rz_list_append(symbols, sym);
    }
 
    free(nlists);
}

References rz_dyldcache_t::buf, free(), k, rz_dyld_loc_sym_t::local_symbols_offset, rz_dyldcache_t::locsym, MACH0_, rz_dyldcache_t::maps, rz_dyldcache_t::n_maps, nlist::n_strx, nlist::n_value, rz_bin_symbol_t::name, rz_dyld_loc_sym_t::nlists_count, rz_dyld_loc_sym_t::nlists_offset, NULL, rz_bin_symbol_t::paddr, rz_buf_fread_at(), rz_buf_get_string(), rz_dyldcache_get_slide(), rz_list_append(), RZ_LOG_ERROR, RZ_NEW0, RZ_NEWS0, rz_str_newf(), set_u_add(), set_u_contains(), rz_dyld_loc_sym_t::strings_offset, rz_dyld_loc_sym_t::strings_size, symbols(), rz_bin_symbol_t::type, ut64(), va2pa(), and rz_bin_symbol_t::vaddr.

Referenced by symbols().

rz_dyldcache_va2pa()

RZ_API ut64 rz_dyldcache_va2pa	(	RzDyldCache *	cache,
		uint64_t	vaddr,
		ut32 *	offset,
		ut32 *	left
	)

Definition at line 1353 of file dyldcache.c.

                                                                                             {
    rz_return_val_if_fail(cache, UT64_MAX);
    ut64 slide = rz_dyldcache_get_slide(cache);
    ut64 res = va2pa(vaddr, cache->n_maps, cache->maps, cache->buf, slide, offset, left);
    if (res == UT64_MAX) {
        res = 0;
    }
    return res;
}

References rz_dyldcache_t::buf, rz_dyldcache_t::maps, rz_dyldcache_t::n_maps, rz_dyldcache_get_slide(), rz_return_val_if_fail, ut64(), UT64_MAX, and va2pa().

Referenced by bin_obj_va2pa(), classes(), and sections_from_bin().