elf_notes.c File Reference

#include "elf.h"

Go to the source code of this file.

Macros
#define	ROUND_UP_4(x)   ((x) + (4 - 1)) / 4 * 4
#define	X86   0
#define	X86_64   1
#define	ARM   2
#define	AARCH64   3
#define	ARCH_LEN   4

Functions
static bool	parse_note_prstatus (ELFOBJ *bin, RzVector *notes, Elf_(Nhdr) *note_segment_header, ut64 offset)
static bool	get_note_file_aux (ELFOBJ *bin, RzBinElfNoteFile *file, ut64 *offset)
static bool	get_note_file (ELFOBJ *bin, RzBinElfNoteFile *file, ut64 *offset)
static bool	set_note_file (ELFOBJ *bin, RzBinElfNoteFile *file, ut64 *offset, char *name)
static bool	parse_note_file (ELFOBJ *bin, RzVector *notes, Elf_(Nhdr) *note_segment_header, ut64 offset)
static bool	set_note (ELFOBJ *bin, RzVector *notes, Elf_(Nhdr) *note_segment_header, ut64 offset)
static bool	read_note_segment_header (ELFOBJ *bin, ut64 *offset, Elf_(Nhdr) *note_segment_header)
static bool	set_note_segment (ELFOBJ *bin, RzVector *notes, RzBinElfSegment *segment)
static void	note_prstatus_free (RzBinElfNotePrStatus *ptr)
static void	note_file_free (RzBinElfNoteFile *ptr)
static void	note_free (void *e, RZ_UNUSED void *user)
static void	note_segment_free (void *e, RZ_UNUSED void *user)
RZ_BORROW RzBinElfPrStatusLayout *Elf_()	rz_bin_elf_get_prstatus_layout (RZ_NONNULL ELFOBJ *bin)
RZ_OWN RzVector *Elf_()	rz_bin_elf_notes_new (RZ_NONNULL ELFOBJ *bin)
bool Elf_()	rz_bin_elf_has_notes (RZ_NONNULL ELFOBJ *bin)

Variables
static RzBinElfPrStatusLayout	prstatus_layouts [ARCH_LEN]

Macro Definition Documentation

AARCH64

#define AARCH64   3

Definition at line 14 of file elf_notes.c.

ARCH_LEN

#define ARCH_LEN   4

Definition at line 15 of file elf_notes.c.

ARM

#define ARM   2

Definition at line 13 of file elf_notes.c.

ROUND_UP_4

#define ROUND_UP_4

(

x

)

((x) + (4 - 1)) / 4 * 4

Definition at line 9 of file elf_notes.c.

X86

#define X86   0

Definition at line 11 of file elf_notes.c.

X86_64

#define X86_64   1

Definition at line 12 of file elf_notes.c.

Function Documentation

get_note_file()

static bool get_note_file ( ELFOBJ *  bin, RzBinElfNoteFile *  file, ut64 *  offset  )

static

Definition at line 58 of file elf_notes.c.

                                                                             {
    ut64 tmp = *offset;
    if (!get_note_file_aux(bin, file, offset)) {
        RZ_LOG_WARN("Failed to read NT_FILE at 0x%" PFMT64x ".\n", tmp);
    }
 
    return true;
}

References get_note_file_aux(), PFMT64x, RZ_LOG_WARN, autogen_x86imm::tmp, and ut64().

Referenced by set_note_file().

get_note_file_aux()

static bool get_note_file_aux ( ELFOBJ *  bin, RzBinElfNoteFile *  file, ut64 *  offset  )

static

Definition at line 52 of file elf_notes.c.

                                                                                 {
    return Elf_(rz_bin_elf_read_addr)(bin, offset, &file->start_vaddr) &&
        Elf_(rz_bin_elf_read_addr)(bin, offset, &file->end_vaddr) &&
        Elf_(rz_bin_elf_read_off)(bin, offset, &file->file_off);
}

References Elf_, rz_bin_elf_read_addr(), and rz_bin_elf_read_off().

Referenced by get_note_file().

note_file_free()

static void note_file_free ( RzBinElfNoteFile *  ptr )

static

Definition at line 179 of file elf_notes.c.

                                                  {
    free(ptr->file);
}

References free().

Referenced by note_free().

note_free()

static void note_free ( void *  e, RZ_UNUSED void *  user  )

static

Definition at line 183 of file elf_notes.c.

                                                     {
    RzBinElfNote *ptr = e;
 
    switch (ptr->type) {
    case NT_FILE:
        note_file_free(&ptr->file);
        break;
    case NT_PRSTATUS:
        note_prstatus_free(&ptr->prstatus);
        break;
    }
}

References e, note_file_free(), note_prstatus_free(), NT_FILE, NT_PRSTATUS, and RzBinElfNote.

Referenced by rz_bin_elf_notes_new().

note_prstatus_free()

static void note_prstatus_free ( RzBinElfNotePrStatus *  ptr )

static

Definition at line 175 of file elf_notes.c.

                                                          {
    free(ptr->regstate);
}

References free(), and rz_bin_elf_note_prstatus_t::regstate.

Referenced by note_free().

note_segment_free()

static void note_segment_free ( void *  e, RZ_UNUSED void *  user  )

static

Definition at line 196 of file elf_notes.c.

                                                             {
    RzVector *ptr = e;
    rz_vector_fini(ptr);
}

References e, and rz_vector_fini().

Referenced by rz_bin_elf_notes_new().

parse_note_file()

static bool parse_note_file ( ELFOBJ *  bin, RzVector *  notes, Elf_(Nhdr) *  note_segment_header, ut64  offset  )

static

Definition at line 76 of file elf_notes.c.

                                                                                                         {
    Elf_(Addr) n_maps;
    if (!Elf_(rz_bin_elf_read_addr)(bin, &offset, &n_maps)) {
        return false;
    }
 
    offset += sizeof(Elf_(Addr)); // skip page size always 1
 
    Elf_(Addr) strings_offset; // offset after the addr-array
    if (!Elf_(rz_bin_elf_mul_addr)(&strings_offset, n_maps, sizeof(Elf_(Addr)) * 3)) {
        return false;
    }
 
    ut64 entry_offset = offset;
    for (Elf_(Addr) i = 0; i < n_maps; i++) {
        if (strings_offset >= note_segment_header->n_descsz) {
            return false;
        }
 
        char *name = rz_buf_get_nstring(bin->b, offset + strings_offset, note_segment_header->n_descsz);
        if (!name) {
            return false;
        }
 
        RzBinElfNote *note = rz_vector_push(notes, NULL);
        if (!note) {
            free(name);
            return false;
        }
 
        note->type = NT_FILE;
 
        if (!set_note_file(bin, &note->file, &entry_offset, name)) {
            return false;
        }
 
        strings_offset += strlen(name) + 1;
    }
 
    return true;
}

References Elf_, free(), i, NT_FILE, NULL, rz_bin_elf_mul_addr(), rz_bin_elf_read_addr(), rz_buf_get_nstring(), rz_vector_push(), RzBinElfNote, set_note_file(), and ut64().

Referenced by set_note().

parse_note_prstatus()

static bool parse_note_prstatus ( ELFOBJ *  bin, RzVector *  notes, Elf_(Nhdr) *  note_segment_header, ut64  offset  )

static

Definition at line 24 of file elf_notes.c.

                                                                                                             {
    RzBinElfPrStatusLayout *layout = Elf_(rz_bin_elf_get_prstatus_layout)(bin);
    if (!layout) {
        RZ_LOG_WARN("Fetching registers from core file not supported for this architecture.\n");
        return false;
    }
 
    RzBinElfNote *note = rz_vector_push(notes, NULL);
    if (!note) {
        return false;
    }
 
    note->type = NT_PRSTATUS;
 
    note->prstatus.regstate_size = layout->regsize;
    note->prstatus.regstate = RZ_NEWS(ut8, layout->regsize);
    if (!note->prstatus.regstate) {
        return false;
    }
 
    if (rz_buf_read_at(bin->b, offset + layout->regdelta, note->prstatus.regstate, note->prstatus.regstate_size) != layout->regsize) {
        RZ_LOG_WARN("Failed to read register state from CORE file\n");
        return false;
    }
 
    return true;
}

References Elf_, NT_PRSTATUS, NULL, prstatus_layout_t::regdelta, prstatus_layout_t::regsize, rz_bin_elf_get_prstatus_layout(), rz_buf_read_at(), RZ_LOG_WARN, RZ_NEWS, rz_vector_push(), and RzBinElfNote.

Referenced by set_note().

read_note_segment_header()

static bool read_note_segment_header ( ELFOBJ *  bin, ut64 *  offset, Elf_(Nhdr) *  note_segment_header  )

static

Definition at line 137 of file elf_notes.c.

                                                                                                  {
    if (!Elf_(rz_bin_elf_read_word)(bin, offset, &note_segment_header->n_namesz)) {
        return false;
    }
 
    if (!Elf_(rz_bin_elf_read_word)(bin, offset, &note_segment_header->n_descsz)) {
        return false;
    }
 
    if (!Elf_(rz_bin_elf_read_word)(bin, offset, &note_segment_header->n_type)) {
        return false;
    }
 
    return true;
}

References Elf_, and rz_bin_elf_read_word().

Referenced by set_note_segment().

rz_bin_elf_get_prstatus_layout()

RZ_BORROW RzBinElfPrStatusLayout* Elf_() rz_bin_elf_get_prstatus_layout

(

RZ_NONNULL ELFOBJ *

bin

)

Definition at line 201 of file elf_notes.c.

                                                                                               {
    rz_return_val_if_fail(bin, NULL);
 
    switch (bin->ehdr.e_machine) {
    case EM_AARCH64:
        return prstatus_layouts + AARCH64;
    case EM_ARM:
        return prstatus_layouts + ARM;
    case EM_386:
        return prstatus_layouts + X86;
    case EM_X86_64:
        return prstatus_layouts + X86_64;
    }
 
    return NULL;
}

References AARCH64, ARM, EM_386, EM_AARCH64, EM_ARM, EM_X86_64, NULL, prstatus_layouts, rz_return_val_if_fail, X86, and X86_64.

Referenced by parse_note_prstatus(), and rz_bin_elf_get_sp_val().

rz_bin_elf_has_notes()

bool Elf_() rz_bin_elf_has_notes

(

RZ_NONNULL ELFOBJ *

bin

)

Definition at line 255 of file elf_notes.c.

                                                        {
    rz_return_val_if_fail(bin, false);
    return bin->notes;
}

References rz_return_val_if_fail.

rz_bin_elf_notes_new()

RZ_OWN RzVector* Elf_() rz_bin_elf_notes_new

(

RZ_NONNULL ELFOBJ *

bin

)

Definition at line 218 of file elf_notes.c.

                                                                    {
    rz_return_val_if_fail(bin, false);
 
    RzVector *result = rz_vector_new(sizeof(RzVector), note_segment_free, NULL);
    if (!result) {
        return NULL;
    }
 
    RzBinElfSegment *segment;
    rz_bin_elf_foreach_segments(bin, segment) {
        if (!segment->is_valid || segment->data.p_type != PT_NOTE) {
            continue;
        }
 
        RzVector *notes = rz_vector_push(result, NULL);
        if (!notes) {
            rz_vector_free(result);
            return NULL;
        }
 
        rz_vector_init(notes, sizeof(RzBinElfNote), note_free, NULL);
 
        if (!set_note_segment(bin, notes, segment)) {
            rz_vector_fini(notes);
            rz_vector_free(result);
            return NULL;
        }
    }
 
    if (!rz_vector_len(result)) {
        rz_vector_free(result);
        return NULL;
    }
 
    return result;
}

References note_free(), note_segment_free(), NULL, PT_NOTE, rz_bin_elf_foreach_segments, rz_return_val_if_fail, rz_vector_fini(), rz_vector_free(), rz_vector_init(), rz_vector_len(), rz_vector_new(), rz_vector_push(), RzBinElfNote, RzBinElfSegment, and set_note_segment().

Referenced by init().

set_note()

static bool set_note ( ELFOBJ *  bin, RzVector *  notes, Elf_(Nhdr) *  note_segment_header, ut64  offset  )

static

Definition at line 118 of file elf_notes.c.

                                                                                                  {
    switch (note_segment_header->n_type) {
    case NT_FILE:
        if (!parse_note_file(bin, notes, note_segment_header, offset)) {
            RZ_LOG_WARN("Failed to parse NT_FILE.\n");
            return false;
        }
        break;
    case NT_PRSTATUS:
        if (!parse_note_prstatus(bin, notes, note_segment_header, offset)) {
            RZ_LOG_WARN("Failed to parse NT_PRSTATUS.\n");
            return false;
        }
        break;
    }
 
    return true;
}

References NT_FILE, NT_PRSTATUS, parse_note_file(), parse_note_prstatus(), and RZ_LOG_WARN.

Referenced by set_note_segment().

set_note_file()

static bool set_note_file ( ELFOBJ *  bin, RzBinElfNoteFile *  file, ut64 *  offset, char *  name  )

static

Definition at line 67 of file elf_notes.c.

                                                                                         {
    if (!get_note_file(bin, file, offset)) {
        return false;
    }
 
    file->file = name;
    return true;
}

References get_note_file(), and name.

Referenced by parse_note_file().

set_note_segment()

static bool set_note_segment ( ELFOBJ *  bin, RzVector *  notes, RzBinElfSegment *  segment  )

static

Definition at line 153 of file elf_notes.c.

                                                                                     {
    ut64 offset = segment->data.p_offset;
 
    while (offset < segment->data.p_filesz) {
        Elf_(Nhdr) note_segment_header;
 
        if (!read_note_segment_header(bin, &offset, &note_segment_header)) {
            return false;
        }
 
        offset += ROUND_UP_4(note_segment_header.n_namesz); // skip name
 
        if (!set_note(bin, notes, &note_segment_header, offset)) {
            return false;
        }
 
        offset += ROUND_UP_4(note_segment_header.n_descsz); // skip name
    }
 
    return true;
}

References Elf_, read_note_segment_header(), ROUND_UP_4, set_note(), and ut64().

Referenced by rz_bin_elf_notes_new().

Variable Documentation

prstatus_layouts

RzBinElfPrStatusLayout prstatus_layouts[ARCH_LEN]

static

Initial value:

= {
    [X86] = { 160, 0x48, 32, 0x3c },
    [X86_64] = { 216, 0x70, 64, 0x98 },
    [ARM] = { 72, 0x48, 32, 0x34 },
    [AARCH64] = { 272, 0x70, 64, 0xf8 }
}

Definition at line 17 of file elf_notes.c.

Referenced by rz_bin_elf_get_prstatus_layout().