rz_pdb.h File Reference

#include <rz_util.h>
#include <rz_type.h>
#include <rz_cmd.h>

Go to the source code of this file.

Classes
struct	dbi_stream_header_t
struct	RzPdbRzPdbDbiStreamDbgHeader
struct	dbi_stream_t
struct	RzPdbGDataStream
struct	RzPdbOmapStream
struct	RzPdbPeStream
struct	tpi_stream_header_t
struct	tpi_types
struct	tpi_stream_t
struct	RzPdbGuid
struct	RzRzPdbStreamHeader
struct	RzPdbStream
struct	RzPdbMsfSuperBlock
	MSF file format header https://llvm.org/docs/PDB/MsfFile.html#the-superblock. More...
struct	RzPdbMsfStream
struct	RzPdbMsfStreamDirectory
struct	rz_pdb_t

Macros
#define	CAB_SIGNATURE   "MSCF"
#define	PDB_SIGNATURE   "Microsoft C/C++ MSF 7.00\r\n\x1a\x44\x53\x00\x00\x00"
#define	PDB_SIGNATURE_LEN   32
#define	GET_BF(value, start, len)   (((value) >> (start)) & ((1 << len) - 1))

Typedefs
typedef struct dbi_stream_header_t	RzPdbRzPdbDbiStreamHdr
typedef struct dbi_stream_t	RzPdbDbiStream
typedef struct tpi_stream_header_t	RzPdbTpiStreamHeader
typedef struct tpi_types	RzPdbTpiType
typedef struct tpi_stream_t	RzPdbTpiStream
typedef enum pdb_stream_index_t	RzRzPdbStreamIndex
typedef struct rz_pdb_t	RzPdb

Enumerations
enum	RzPdbTpiCallingConvention {   NEAR_C = 0x00000000 , FAR_C = 0x00000001 , NEAR_PASCAL = 0x00000002 , FAR_PASCAL = 0x00000003 ,   NEAR_FAST = 0x00000004 , FAR_FAST = 0x00000005 , SKIPPED = 0x00000006 , NEAR_STD = 0x00000007 ,   FAR_STD = 0x00000008 , NEAR_SYS = 0x00000009 , FAR_SYS = 0x0000000A , THISCALL = 0x0000000B ,   MIPSCALL = 0x0000000C , GENERIC = 0x0000000D , ALPHACALL = 0x0000000E , PPCCALL = 0x0000000F ,   SHCALL = 0x00000010 , ARMCALL = 0x00000011 , AM33CALL = 0x00000012 , TRICALL = 0x00000013 ,   SH5CALL = 0x00000014 , M32RCALL = 0x00000015 , CLRCALL = 0x00000016 , INLINECALL = 0x00000017 ,   NEAR_VEC = 0X00000018 , RESERVED = 0x00000019 , MAX_CV_CALL }
enum	RzPdbTpiStreamVersion {   V40 = 19950410 , V41 = 19951122 , V50 = 19961031 , V70 = 19990903 ,   V80 = 20040203 }
enum	pdb_stream_index_t {   PDB_STREAM_ROOT = 0 , PDB_STREAM_PDB , PDB_STREAM_TPI , PDB_STREAM_DBI ,   PDB_STREAM_GSYM , PDB_STREAM_SECT_HDR , PDB_STREAM_SECT__HDR_ORIG , PDB_STREAM_OMAP_TO_SRC ,   PDB_STREAM_OMAP_FROM_SRC , PDB_STREAM_FPO , PDB_STREAM_FPO_NEW , PDB_STREAM_XDATA ,   PDB_STREAM_PDATA , PDB_STREAM_TOKEN_RID_MAP , PDB_STREAM_MAX }
enum	pdb_stream_version {   VC2 = 19941610 , VC4 = 19950623 , VC41 = 19950814 , VC50 = 19960307 ,   VC98 = 19970604 , VC70Dep = 19990604 , VC70 = 20000404 , VC80 = 20030901 ,   VC110 = 20091201 , VC140 = 20140508 }

Functions
RZ_API bool	rz_bin_pdb_extract_in_folder (RZ_NONNULL const char *file_cab, RZ_NONNULL const char *output_dir)
	Extracts compressed PDB files into a folder. More...
RZ_API RZ_OWN RzPdb *	rz_bin_pdb_parse_from_file (RZ_NONNULL const char *filename)
	Parse PDB file given the path. More...
RZ_API RZ_OWN RzPdb *	rz_bin_pdb_parse_from_buf (RZ_NONNULL const RzBuffer *buf)
	Parse PDB from the buffer. More...
RZ_API void	rz_bin_pdb_free (RzPdb *pdb)
	Free PDB instance. More...
RZ_API RZ_BORROW RzPdbTpiType *	rz_bin_pdb_get_type_by_index (RZ_NONNULL RzPdbTpiStream *stream, ut32 index)
	Get RzPdbTpiType that matches tpi stream index. More...
RZ_API RZ_OWN char *	rz_bin_pdb_calling_convention_as_string (RZ_NONNULL RzPdbTpiCallingConvention idx)
	Parses calling convention type as string. More...
RZ_API bool	rz_bin_pdb_type_is_fwdref (RZ_NONNULL RzPdbTpiType *t)
	Return true if type is forward definition. More...
RZ_API RZ_BORROW RzList *	rz_bin_pdb_get_type_members (RZ_NONNULL RzPdbTpiStream *stream, RzPdbTpiType *t)
	Get the RzPdbTpiType member list. More...
RZ_API RZ_BORROW char *	rz_bin_pdb_get_type_name (RZ_NONNULL RzPdbTpiType *type)
	Get the name of the type. More...
RZ_API ut64	rz_bin_pdb_get_type_val (RZ_NONNULL RzPdbTpiType *type)
	Get the numeric value inside the type. More...
RZ_API int	rz_bin_pdb_omap_remap (RZ_NONNULL RzPdbOmapStream *omap_stream, int address)
	return remapped symbol address More...

Macro Definition Documentation

CAB_SIGNATURE

#define CAB_SIGNATURE   "MSCF"

Definition at line 15 of file rz_pdb.h.

GET_BF

#define GET_BF	(		value,
			start,
			len
	)		(((value) >> (start)) & ((1 << len) - 1))

Definition at line 19 of file rz_pdb.h.

PDB_SIGNATURE

#define PDB_SIGNATURE   "Microsoft C/C++ MSF 7.00\r\n\x1a\x44\x53\x00\x00\x00"

Definition at line 16 of file rz_pdb.h.

PDB_SIGNATURE_LEN

#define PDB_SIGNATURE_LEN   32

Definition at line 17 of file rz_pdb.h.

Typedef Documentation

RzPdb

typedef struct rz_pdb_t RzPdb

RzPdbDbiStream

typedef struct dbi_stream_t RzPdbDbiStream

RzPdbRzPdbDbiStreamHdr

typedef struct dbi_stream_header_t RzPdbRzPdbDbiStreamHdr

RzPdbTpiStream

typedef struct tpi_stream_t RzPdbTpiStream

RzPdbTpiStreamHeader

typedef struct tpi_stream_header_t RzPdbTpiStreamHeader

RzPdbTpiType

typedef struct tpi_types RzPdbTpiType

RzRzPdbStreamIndex

typedef enum pdb_stream_index_t RzRzPdbStreamIndex

Enumeration Type Documentation

pdb_stream_index_t

enum pdb_stream_index_t

Enumerator
PDB_STREAM_ROOT
PDB_STREAM_PDB
PDB_STREAM_TPI
PDB_STREAM_DBI
PDB_STREAM_GSYM
PDB_STREAM_SECT_HDR
PDB_STREAM_SECT__HDR_ORIG
PDB_STREAM_OMAP_TO_SRC
PDB_STREAM_OMAP_FROM_SRC
PDB_STREAM_FPO
PDB_STREAM_FPO_NEW
PDB_STREAM_XDATA
PDB_STREAM_PDATA
PDB_STREAM_TOKEN_RID_MAP
PDB_STREAM_MAX

Definition at line 161 of file rz_pdb.h.

                                {
    PDB_STREAM_ROOT = 0, // PDB_ROOT_DIRECTORY
    PDB_STREAM_PDB, // PDB STREAM INFO
    PDB_STREAM_TPI, // TYPE INFO
    PDB_STREAM_DBI, // DEBUG INFO
 
    PDB_STREAM_GSYM,
    PDB_STREAM_SECT_HDR,
    PDB_STREAM_SECT__HDR_ORIG,
    PDB_STREAM_OMAP_TO_SRC,
    PDB_STREAM_OMAP_FROM_SRC,
    PDB_STREAM_FPO,
    PDB_STREAM_FPO_NEW,
    PDB_STREAM_XDATA,
    PDB_STREAM_PDATA,
    PDB_STREAM_TOKEN_RID_MAP,
    PDB_STREAM_MAX
} RzRzPdbStreamIndex;

pdb_stream_version

enum pdb_stream_version

Enumerator
VC2
VC4
VC41
VC50
VC98
VC70Dep
VC70
VC80
VC110
VC140

Definition at line 180 of file rz_pdb.h.

                        {
    VC2 = 19941610,
    VC4 = 19950623,
    VC41 = 19950814,
    VC50 = 19960307,
    VC98 = 19970604,
    VC70Dep = 19990604,
    VC70 = 20000404,
    VC80 = 20030901,
    VC110 = 20091201,
    VC140 = 20140508,
};

RzPdbTpiCallingConvention

enum RzPdbTpiCallingConvention

Enumerator
NEAR_C
FAR_C
NEAR_PASCAL
FAR_PASCAL
NEAR_FAST
FAR_FAST
SKIPPED
NEAR_STD
FAR_STD
NEAR_SYS
FAR_SYS
THISCALL
MIPSCALL
GENERIC
ALPHACALL
PPCCALL
SHCALL
ARMCALL
AM33CALL
TRICALL
SH5CALL
M32RCALL
CLRCALL
INLINECALL
NEAR_VEC
RESERVED
MAX_CV_CALL

Definition at line 84 of file rz_pdb.h.

             {
    NEAR_C = 0x00000000,
    FAR_C = 0x00000001,
    NEAR_PASCAL = 0x00000002,
    FAR_PASCAL = 0x00000003,
    NEAR_FAST = 0x00000004,
    FAR_FAST = 0x00000005,
    SKIPPED = 0x00000006,
    NEAR_STD = 0x00000007,
    FAR_STD = 0x00000008,
    NEAR_SYS = 0x00000009,
    FAR_SYS = 0x0000000A,
    THISCALL = 0x0000000B,
    MIPSCALL = 0x0000000C,
    GENERIC = 0x0000000D,
    ALPHACALL = 0x0000000E,
    PPCCALL = 0x0000000F,
    SHCALL = 0x00000010,
    ARMCALL = 0x00000011,
    AM33CALL = 0x00000012,
    TRICALL = 0x00000013,
    SH5CALL = 0x00000014,
    M32RCALL = 0x00000015,
    CLRCALL = 0x00000016,
    INLINECALL = 0x00000017,
    NEAR_VEC = 0X00000018,
    RESERVED = 0x00000019,
    MAX_CV_CALL
} RzPdbTpiCallingConvention;

RzPdbTpiStreamVersion

enum RzPdbTpiStreamVersion

Enumerator
V40
V41
V50
V70
V80

Definition at line 114 of file rz_pdb.h.

             {
    V40 = 19950410,
    V41 = 19951122,
    V50 = 19961031,
    V70 = 19990903,
    V80 = 20040203,
} RzPdbTpiStreamVersion;

Function Documentation

rz_bin_pdb_calling_convention_as_string()

RZ_API RZ_OWN char* rz_bin_pdb_calling_convention_as_string

(

RZ_NONNULL RzPdbTpiCallingConvention

idx

)

Parses calling convention type as string.

Parameters

idx

Definition at line 35 of file tpi.c.

                                                                                                      {
    switch (idx) {
    case NEAR_C:
    case FAR_C:
        return strdup("__cdecl");
    case NEAR_PASCAL:
    case FAR_PASCAL:
        return strdup("__pascal");
    case NEAR_FAST:
    case FAR_FAST:
        return strdup("__fastcall");
    case NEAR_STD:
    case FAR_STD:
        return strdup("__stdcall");
    case NEAR_SYS:
    case FAR_SYS:
        return strdup("__syscall");
    case THISCALL:
        return strdup("__thiscall");
    case NEAR_VEC:
        return strdup("__vectorcall");
    default:
        return NULL;
    }
}

References FAR_C, FAR_FAST, FAR_PASCAL, FAR_STD, FAR_SYS, setup::idx, NEAR_C, NEAR_FAST, NEAR_PASCAL, NEAR_STD, NEAR_SYS, NEAR_VEC, NULL, strdup(), and THISCALL.

Referenced by parse_type_mfunction(), and parse_type_procedure().

rz_bin_pdb_extract_in_folder()

RZ_API bool rz_bin_pdb_extract_in_folder	(	RZ_NONNULL const char *	file_cab,
		RZ_NONNULL const char *	output_dir
	)

Extracts compressed PDB files into a folder.

Parameters

file_cab	The file cab
output_dir	The output dir

Returns

On success returns true, otherwise false.

Definition at line 209 of file cab_extract.c.

                                                                                                             {
    rz_return_val_if_fail(file_cab && output_dir, false);
 
    if (!rz_file_exists(file_cab)) {
        RZ_LOG_ERROR("%s is not a file or does not exist.\n", file_cab);
        return false;
    }
 
    if (!rz_file_is_directory(output_dir)) {
        RZ_LOG_ERROR("%s is not a directory or does not exist.\n", output_dir);
        return false;
    }
 
    struct mscab_decompressor *cabd = NULL;
    struct mscabd_cabinet *cab = NULL;
 
    if (!(cabd = mspack_create_cab_decompressor(NULL))) {
        RZ_LOG_ERROR("Cannot allocate mscab_decompressor.\n");
        return false;
    }
 
    if (!(cab = cabd->open(cabd, file_cab))) {
        RZ_LOG_ERROR("Invalid compressed cab file: %s\n", file_cab);
        mspack_destroy_cab_decompressor(cabd);
        return false;
    }
 
    bool result = true;
    bool is_unix = is_cab_using_unix_paths(cab->files);
    for (struct mscabd_file *file = cab->files; file; file = file->next) {
        char *new_name = sanitize_cab_filename(file, output_dir, is_unix);
        if (!new_name) {
            result = false;
            break;
        }
        if (cabd->extract(cabd, file, new_name)) {
            RZ_LOG_ERROR("cab_extract: %s: %s\n", new_name, cab_error(cabd));
            free(new_name);
            result = false;
            break;
        }
        RZ_LOG_INFO("cab_extract: extracted %s\n", new_name);
        free(new_name);
    }
 
    cabd->close(cabd, cab);
    mspack_destroy_cab_decompressor(cabd);
    return result;
}

References cab_error(), cabd, mscab_decompressor::close, mscab_decompressor::extract, mscabd_cabinet::files, free(), is_cab_using_unix_paths(), mspack_create_cab_decompressor(), mspack_destroy_cab_decompressor(), file::next, NULL, mscab_decompressor::open, rz_file_exists(), rz_file_is_directory(), RZ_LOG_ERROR, RZ_LOG_INFO, rz_return_val_if_fail, and sanitize_cab_filename().

Referenced by download(), and rz_cmd_pdb_extract_handler().

rz_bin_pdb_free()

RZ_API void rz_bin_pdb_free

(

RzPdb *

pdb

)

Free PDB instance.

Parameters

pdb	PDB instance

Returns

void

Definition at line 366 of file pdb.c.

                                        {
    if (!pdb) {
        return;
    }
    rz_buf_free(pdb->buf);
    free(pdb->super_block);
    rz_list_free(pdb->streams);
    free(pdb->s_pdb);
    free_dbi_stream(pdb->s_dbi);
    free_gdata_stream(pdb->s_gdata);
    free_omap_stream(pdb->s_omap);
    free_tpi_stream(pdb->s_tpi);
    free_pe_stream(pdb->s_pe);
    free(pdb);
}

References rz_pdb_t::buf, free(), free_dbi_stream(), free_gdata_stream(), free_omap_stream(), free_pe_stream(), free_tpi_stream(), rz_buf_free(), rz_list_free(), rz_pdb_t::s_dbi, rz_pdb_t::s_gdata, rz_pdb_t::s_omap, rz_pdb_t::s_pdb, rz_pdb_t::s_pe, rz_pdb_t::s_tpi, rz_pdb_t::streams, and rz_pdb_t::super_block.

Referenced by GetHeapGlobalsOffset(), rz_bin_pdb_parse_from_buf(), rz_cmd_info_pdb_show_handler(), rz_core_bin_pdb_load(), and rz_core_bin_print().

rz_bin_pdb_get_type_by_index()

RZ_API RZ_BORROW RzPdbTpiType* rz_bin_pdb_get_type_by_index	(	RZ_NONNULL RzPdbTpiStream *	stream,
		ut32	index
	)

Get RzPdbTpiType that matches tpi stream index.

Parameters

stream	TPI Stream
index	TPI Stream Index

Definition at line 1844 of file tpi.c.

                                                                                                           {
    rz_return_val_if_fail(stream, NULL);
    if (index == 0) {
        return NULL;
    }
 
    RBNode *node = rz_rbtree_find(stream->types, &index, tpi_type_node_cmp, NULL);
    if (!node) {
        if (!is_simple_type(stream, index)) {
            return NULL;
        } else {
            return parse_simple_type(stream, index);
        }
    }
    RzPdbTpiType *type = container_of(node, RzPdbTpiType, rb);
    return type;
}

References container_of, is_simple_type(), NULL, parse_simple_type(), rz_rbtree_find(), rz_return_val_if_fail, tpi_type_node_cmp(), and type.

Referenced by parse_enum(), parse_structure(), parse_type_arglist(), parse_type_array(), parse_type_member(), parse_type_mfunction(), parse_type_modifier(), parse_type_nest(), parse_type_onemethod(), parse_type_pointer(), parse_type_procedure(), parse_type_static_member(), parse_union(), and rz_bin_pdb_get_type_members().

rz_bin_pdb_get_type_members()

RZ_API RZ_BORROW RzList* rz_bin_pdb_get_type_members	(	RZ_NONNULL RzPdbTpiStream *	stream,
		RzPdbTpiType *	t
	)

Get the RzPdbTpiType member list.

Parameters

stream	TPI stream
t	RzPdbTpiType

Returns

RzList *

Definition at line 406 of file tpi.c.

                                                                                                         {
    rz_return_val_if_fail(t, NULL);
    RzPdbTpiType *tmp;
    switch (t->leaf_type) {
    case LF_FIELDLIST: {
        Tpi_LF_FieldList *lf = t->type_data;
        return lf->substructs;
    }
    case LF_UNION: {
        tmp = rz_bin_pdb_get_type_by_index(stream, ((Tpi_LF_Union *)t->type_data)->field_list);
        Tpi_LF_FieldList *lf_union = tmp ? tmp->type_data : NULL;
        return lf_union ? lf_union->substructs : NULL;
    }
    case LF_STRUCTURE:
    case LF_CLASS: {
        tmp = rz_bin_pdb_get_type_by_index(stream, ((Tpi_LF_Structure *)t->type_data)->field_list);
        Tpi_LF_FieldList *lf_struct = tmp ? tmp->type_data : NULL;
        return lf_struct ? lf_struct->substructs : NULL;
    }
    case LF_STRUCTURE_19:
    case LF_CLASS_19: {
        tmp = rz_bin_pdb_get_type_by_index(stream, ((Tpi_LF_Structure_19 *)t->type_data)->field_list);
        Tpi_LF_FieldList *lf_struct19 = tmp ? tmp->type_data : NULL;
        return lf_struct19 ? lf_struct19->substructs : NULL;
    }
    case LF_ENUM: {
        tmp = rz_bin_pdb_get_type_by_index(stream, ((Tpi_LF_Enum *)t->type_data)->field_list);
        Tpi_LF_FieldList *lf_enum = tmp ? tmp->type_data : NULL;
        return lf_enum ? lf_enum->substructs : NULL;
    }
    default:
        return NULL;
    }
}

References tpi_types::leaf_type, LF_CLASS, LF_CLASS_19, LF_ENUM, LF_FIELDLIST, LF_STRUCTURE, LF_STRUCTURE_19, LF_UNION, NULL, rz_bin_pdb_get_type_by_index(), rz_return_val_if_fail, Tpi_LF_FieldList::substructs, autogen_x86imm::tmp, and tpi_types::type_data.

Referenced by parse_enum(), parse_structure(), and parse_union().

rz_bin_pdb_get_type_name()

RZ_API RZ_BORROW char* rz_bin_pdb_get_type_name

(

RZ_NONNULL RzPdbTpiType *

type

)

Get the name of the type.

Parameters

type	RzPdbTpiType *

Returns

char *

Definition at line 447 of file tpi.c.

                                                                               {
    rz_return_val_if_fail(type, NULL);
    switch (type->leaf_type) {
    case LF_MEMBER: {
        Tpi_LF_Member *lf_member = type->type_data;
        return lf_member->name.name;
    }
    case LF_STMEMBER: {
        Tpi_LF_StaticMember *lf_stmember = type->type_data;
        return lf_stmember->name.name;
    }
    case LF_ONEMETHOD: {
        Tpi_LF_OneMethod *lf_onemethod = type->type_data;
        return lf_onemethod->name.name;
    }
    case LF_METHOD: {
        Tpi_LF_Method *lf_method = type->type_data;
        return lf_method->name.name;
    }
    case LF_NESTTYPE: {
        Tpi_LF_NestType *lf_nesttype = type->type_data;
        return lf_nesttype->name.name;
    }
    case LF_ENUM: {
        Tpi_LF_Enum *lf_enum = type->type_data;
        return lf_enum->name.name;
    }
    case LF_ENUMERATE: {
        Tpi_LF_Enumerate *lf_enumerate = type->type_data;
        return lf_enumerate->name.name;
    }
    case LF_CLASS:
    case LF_STRUCTURE: {
        Tpi_LF_Structure *lf_struct = type->type_data;
        return lf_struct->name.name;
    }
    case LF_CLASS_19:
    case LF_STRUCTURE_19: {
        Tpi_LF_Structure_19 *lf_struct_19 = type->type_data;
        return lf_struct_19->name.name;
    }
    case LF_ARRAY: {
        Tpi_LF_Array *lf_array = type->type_data;
        return lf_array->name.name;
    }
    case LF_UNION: {
        Tpi_LF_Union *lf_union = type->type_data;
        return lf_union->name.name;
    }
    default:
        return NULL;
    }
}

References LF_ARRAY, LF_CLASS, LF_CLASS_19, LF_ENUM, LF_ENUMERATE, LF_MEMBER, LF_METHOD, LF_NESTTYPE, LF_ONEMETHOD, LF_STMEMBER, LF_STRUCTURE, LF_STRUCTURE_19, LF_UNION, Tpi_Type_String::name, Tpi_LF_Array::name, Tpi_LF_Structure::name, Tpi_LF_Structure_19::name, Tpi_LF_Union::name, Tpi_LF_Enum::name, Tpi_LF_Enumerate::name, Tpi_LF_NestType::name, Tpi_LF_Method::name, Tpi_LF_Member::name, Tpi_LF_StaticMember::name, Tpi_LF_OneMethod::name, NULL, rz_return_val_if_fail, and type.

Referenced by parse_enum(), parse_enumerate(), parse_struct_member(), parse_structure(), parse_type_nest(), parse_type_onemethod(), parse_union(), and parse_union_member().

rz_bin_pdb_get_type_val()

RZ_API ut64 rz_bin_pdb_get_type_val

(

RZ_NONNULL RzPdbTpiType *

type

)

Get the numeric value inside the type.

Parameters

type	RzPdbTpiType *

Returns

ut64

Definition at line 507 of file tpi.c.

                                                                   {
    rz_return_val_if_fail(type, -1);
    switch (type->leaf_type) {
    case LF_ONEMETHOD: {
        Tpi_LF_OneMethod *lf_onemethod = type->type_data;
        return lf_onemethod->offset_in_vtable;
    }
    case LF_MEMBER: {
        Tpi_LF_Member *lf_member = type->type_data;
        return get_numeric_val(&lf_member->offset);
    }
    case LF_ENUMERATE: {
        Tpi_LF_Enumerate *lf_enumerate = type->type_data;
        return get_numeric_val(&lf_enumerate->enum_value);
    }
    case LF_CLASS:
    case LF_STRUCTURE: {
        Tpi_LF_Structure *lf_struct = type->type_data;
        return get_numeric_val(&lf_struct->size);
    }
    case LF_CLASS_19:
    case LF_STRUCTURE_19: {
        Tpi_LF_Structure_19 *lf_struct_19 = type->type_data;
        return get_numeric_val(&lf_struct_19->size);
    }
    case LF_ARRAY: {
        Tpi_LF_Array *lf_array = type->type_data;
        return get_numeric_val(&lf_array->size);
    }
    case LF_UNION: {
        Tpi_LF_Union *lf_union = type->type_data;
        return get_numeric_val(&lf_union->size);
    }
    case LF_INDEX: {
        Tpi_LF_Index *lf_index = type->type_data;
        return lf_index->index;
    }
    default:
        return 0;
    }
}

References Tpi_LF_Enumerate::enum_value, get_numeric_val(), Tpi_LF_Index::index, LF_ARRAY, LF_CLASS, LF_CLASS_19, LF_ENUMERATE, LF_INDEX, LF_MEMBER, LF_ONEMETHOD, LF_STRUCTURE, LF_STRUCTURE_19, LF_UNION, Tpi_LF_Member::offset, Tpi_LF_OneMethod::offset_in_vtable, rz_return_val_if_fail, Tpi_LF_Array::size, Tpi_LF_Structure::size, Tpi_LF_Structure_19::size, Tpi_LF_Union::size, and type.

Referenced by parse_enum(), parse_enumerate(), parse_struct_member(), parse_structure(), parse_type_array(), parse_union(), and parse_union_member().

rz_bin_pdb_omap_remap()

RZ_API int rz_bin_pdb_omap_remap	(	RZ_NONNULL RzPdbOmapStream *	omap_stream,
		int	address
	)

return remapped symbol address

Parameters

omap_stream	RzPdbOmapStream
address	Where to remap

Returns

int

Definition at line 89 of file omap.c.

                                                                                       {
    OmapEntry *omap_entry = 0;
    RzListIter *it = 0;
    int i = 0;
    int pos = 0;
    int len = 0;
 
    if (!omap_stream) {
        return address;
    }
 
    len = rz_list_length(omap_stream->entries);
 
    if (omap_stream->froms == 0) {
        omap_stream->froms = (unsigned int *)malloc(4 * len);
        if (!omap_stream->froms) {
            return -1;
        }
        it = rz_list_iterator(omap_stream->entries);
        while (rz_list_iter_next(it)) {
            omap_entry = (OmapEntry *)rz_list_iter_get(it);
            omap_stream->froms[i] = omap_entry->from;
            i++;
        }
    }
 
    // mb (len -1) ???
    pos = binary_search(omap_stream->froms, address, 0, (len));
 
    if (pos == -1) {
        return -1;
    }
 
    if (omap_stream->froms[pos] != address) {
        pos -= 1;
    }
    omap_entry = (OmapEntry *)rz_list_get_n(omap_stream->entries, pos);
    if (!omap_entry) {
        return -1;
    }
    if (omap_entry->to == 0) {
        return omap_entry->to;
    }
    return omap_entry->to + (address - omap_entry->from);
}

References binary_search(), OmapEntry::from, i, len, malloc(), pos, rz_list_get_n(), rz_list_iterator(), rz_list_length(), and OmapEntry::to.

Referenced by pdb_set_symbols(), and rz_core_bin_pdb_gvars_as_string().

rz_bin_pdb_parse_from_buf()

RZ_API RZ_OWN RzPdb* rz_bin_pdb_parse_from_buf

(

RZ_NONNULL const RzBuffer *

buf

)

Parse PDB from the buffer.

Parameters

buf	mmap of the PDB file

Returns

RzPdb *

Definition at line 315 of file pdb.c.

                                                                               {
    rz_return_val_if_fail(buf, NULL);
    RzPdb *pdb = RZ_NEW0(RzPdb);
    if (!pdb) {
        goto error;
    }
    pdb->buf = (RzBuffer *)buf;
    pdb->super_block = RZ_NEW0(RzPdbMsfSuperBlock);
    st64 len = rz_buf_read(pdb->buf, (ut8 *)pdb->super_block->file_magic, PDB_SIGNATURE_LEN);
    if (len != PDB_SIGNATURE_LEN) {
        RZ_LOG_ERROR("Wrong magic length!\n");
        goto error;
    }
    if (memcmp(pdb->super_block->file_magic, PDB_SIGNATURE, PDB_SIGNATURE_LEN)) {
        RZ_LOG_ERROR("PDB Signature Error!\n");
        goto error;
    }
    if (!rz_buf_read_le32(pdb->buf, &pdb->super_block->block_size) ||
        !rz_buf_read_le32(pdb->buf, &pdb->super_block->free_block_map_block) ||
        !rz_buf_read_le32(pdb->buf, &pdb->super_block->num_blocks) ||
        !rz_buf_read_le32(pdb->buf, &pdb->super_block->num_directory_bytes) ||
        !rz_buf_read_le32(pdb->buf, &pdb->super_block->unknown) ||
        !rz_buf_read_le32(pdb->buf, &pdb->super_block->block_map_addr)) {
        goto error;
    }
    ut64 bufsize = rz_buf_size((RzBuffer *)buf); // length of whole PDB file
    bool valid =
        pdb->super_block->num_blocks > 0 &&
        (ut64)pdb->super_block->num_blocks * pdb->super_block->block_size == bufsize &&
        pdb->super_block->free_block_map_block < pdb->super_block->num_blocks &&
        pdb->super_block->num_directory_bytes > 0;
    if (!valid) {
        RZ_LOG_ERROR("Invalid MSF superblock!\n");
        goto error;
    }
    if (!pdb7_parse(pdb)) {
        goto error;
    }
    return pdb;
error:
 
    rz_bin_pdb_free(pdb);
    return NULL;
}

References RzPdbMsfSuperBlock::block_map_addr, RzPdbMsfSuperBlock::block_size, rz_pdb_t::buf, error(), RzPdbMsfSuperBlock::file_magic, RzPdbMsfSuperBlock::free_block_map_block, if(), len, NULL, RzPdbMsfSuperBlock::num_blocks, RzPdbMsfSuperBlock::num_directory_bytes, pdb7_parse(), PDB_SIGNATURE, PDB_SIGNATURE_LEN, rz_bin_pdb_free(), rz_buf_read(), rz_buf_read_le32, rz_buf_size(), RZ_LOG_ERROR, RZ_NEW0, rz_return_val_if_fail, st64, rz_pdb_t::super_block, RzPdbMsfSuperBlock::unknown, ut64(), and valid.

Referenced by rz_bin_pdb_parse_from_file().

rz_bin_pdb_parse_from_file()

RZ_API RZ_OWN RzPdb* rz_bin_pdb_parse_from_file

(

RZ_NONNULL const char *

filename

)

Parse PDB file given the path.

Parameters

filename

path of the PDB file

Returns

RzPdb *

Definition at line 292 of file pdb.c.

                                                                                 {
    rz_return_val_if_fail(filename, NULL);
    RzBuffer *buf = rz_buf_new_slurp(filename);
    if (!buf) {
        RZ_LOG_ERROR("%s: Error reading file \"%s\"\n", __FUNCTION__, filename);
        return false;
    }
 
    if (is_compressed_pdb(buf)) {
        rz_buf_free(buf);
        RZ_LOG_ERROR("The pdb file %s seems to be compressed, please use idpx command to extract the contents.\n", filename);
        return NULL;
    }
 
    return rz_bin_pdb_parse_from_buf(buf);
}

References is_compressed_pdb(), NULL, rz_bin_pdb_parse_from_buf(), rz_buf_free(), rz_buf_new_slurp(), RZ_LOG_ERROR, and rz_return_val_if_fail.

Referenced by GetHeapGlobalsOffset(), and rz_core_pdb_load_info().

rz_bin_pdb_type_is_fwdref()

RZ_API bool rz_bin_pdb_type_is_fwdref

(

RZ_NONNULL RzPdbTpiType *

t

)

Return true if type is forward definition.

Parameters

t	RzPdbTpiType

Returns

bool

Definition at line 372 of file tpi.c.

                                                                  {
    rz_return_val_if_fail(t, false); // return val stands for we do nothing for it
    switch (t->leaf_type) {
    case LF_UNION: {
        Tpi_LF_Union *lf = (Tpi_LF_Union *)t->type_data;
        return lf->prop.bits.fwdref ? true : false;
    }
    case LF_STRUCTURE:
    case LF_CLASS: {
        Tpi_LF_Structure *lf = (Tpi_LF_Structure *)t->type_data;
        return lf->prop.bits.fwdref ? true : false;
    }
    case LF_STRUCTURE_19:
    case LF_CLASS_19: {
        Tpi_LF_Structure_19 *lf = (Tpi_LF_Structure_19 *)t->type_data;
        return lf->prop.bits.fwdref ? true : false;
    }
    case LF_ENUM: {
        Tpi_LF_Enum *lf = (Tpi_LF_Enum *)t->type_data;
        return lf->prop.bits.fwdref ? true : false;
    }
    default:
        rz_warn_if_reached();
        return false;
    }
}

References TpiCVProperty::bits, TpiCVProperty::fwdref, LF_CLASS, LF_CLASS_19, LF_ENUM, LF_STRUCTURE, LF_STRUCTURE_19, LF_UNION, Tpi_LF_Structure::prop, Tpi_LF_Structure_19::prop, Tpi_LF_Union::prop, Tpi_LF_Enum::prop, rz_return_val_if_fail, and rz_warn_if_reached.

Referenced by parse_enum(), parse_structure(), and parse_union().