machtraps Namespace Reference

Functions
def	walk_back_until (addr, pattern, min_addr)
def	carve_trap_num (addr, flag)
def	beautify_name (name)
def	carve_traps ()

Variables
	r = rzpipe.open()
def	traps = carve_traps()

Function Documentation

beautify_name()

def machtraps.beautify_name

(

name

)

Definition at line 58 of file machtraps.py.

def beautify_name(name):
    return re.sub(r"^_", "", name)
 
 

Referenced by carve_traps().

carve_trap_num()

def machtraps.carve_trap_num	(		addr,
			flag
	)

Definition at line 41 of file machtraps.py.

def carve_trap_num(addr, flag):
    saved_seek = r.cmd("?v $$")
    r.cmd("e io.cache=true")
    r.cmd("e emu.write=true")
    r.cmd("aei")
    r.cmd("aeim")
    min_addr = int(r.cmd("?v " + flag), 0)
    emu_start = walk_back_until(addr - 4, r"^b|^ret|^invalid", min_addr)
    r.cmd("s " + str(emu_start))
    obj = r.cmd("aefa 0x%08x~[0]:0" % addr)
    r.cmd("s " + saved_seek)
    val = r.cmdj("pv4j @ %s+0x14" % obj.strip())[0]["value"]
    if val == 0:
        val = r.cmdj("pv4j @ %s+0x18" % obj.strip())[0]["value"]
    return val
 
 

References int, cmd_descs_generate.str, and walk_back_until().

Referenced by carve_traps().

carve_traps()

def machtraps.carve_traps

(

)

Definition at line 62 of file machtraps.py.

def carve_traps():
    msgs = r.cmdj("axtj @ sym._mach_msg")
    if len(msgs) == 0:
        r.cmd("s sym._mach_msg")
        r.cmd("aae $SS @ $S")
        r.cmd("shu")
        msgs = r.cmdj("axtj @ sym._mach_msg")
        if len(msgs) == 0:
            print("Cannot find refs to mach_msg!")
            return
 
    traps = {}
    for ref in msgs:
        if ref["type"] != "CALL" or "realname" not in ref:
            continue
        name = ref["realname"]
        if re.search(r"^_mach_msg", name) != None:
            continue
        addr = ref["from"]
        traps[addr] = {"name": name}
 
    result = []
    for addr in traps:
        trap = traps[addr]
        flag = "sym.%s" % trap["name"]
        trap["name"] = beautify_name(trap["name"])
        trap["num"] = carve_trap_num(addr, flag)
        if trap["num"] != None:
            result.append(trap)
 
    result.sort(key=lambda x: x["num"])
 
    return result
 
 

References beautify_name(), carve_trap_num(), and len.

walk_back_until()

def machtraps.walk_back_until	(		addr,
			pattern,
			min_addr
	)

Definition at line 26 of file machtraps.py.

def walk_back_until(addr, pattern, min_addr):
    cursor = addr
    while cursor >= min_addr:
        op = r.cmdj("aoj@" + str(cursor))[0]["opcode"]
        if re.search(pattern, op) != None:
            return cursor + 4
        if re.search(r"^ret", op) != None:
            return cursor + 4
        if re.search(r"^b ", op) != None:
            return cursor + 4
        cursor -= 4
 
    return min_addr
 
 

References cmd_descs_generate.str.

Referenced by carve_trap_num().

Variable Documentation

r

machtraps.r = rzpipe.open()

Definition at line 23 of file machtraps.py.

traps

def machtraps.traps = carve_traps()

Definition at line 98 of file machtraps.py.