5152d0c9f7
Foundation for replacing fold's dead/abstract binary encoder with a real
SSA P-Code frontend. Verified root-cause gap: serializeBinaryIR() emits only
data-discovery nodes (sections/strings/imports/exports); the control-flow
BinaryExprKind values (BasicBlock/CallSite/...) are never constructed, so the
Z3-BB encoder's encodable filter is always empty and encodeBinaryBBs never
runs — hence 0 binary Z3 findings. The P-Code pipeline supersedes that path.
Phase 0 — docs/internal/ghidra-pcode-integration-research.md: P-Code opcode
core, the decompiler C++ embedding API (LoadImage/SleighArchitecture/Funcdata),
the CORE+DECCORE+SLEIGH source sets, no-bison finding, and pypcode as build
reference.
Phase 1 — vendored Ghidra decompiler at pinned commit (Ghidra_12.1_build,
7e89d94e34...) under third_party/ghidra-decompiler/ (cpp + AArch64 specs +
Apache-2.0 LICENSE + VENDOR.md + .gitignore for build artifacts). Validated by
hand on this clang-21/macOS toolchain:
- full SSA engine (CORE+DECCORE+SLEIGH, 80 files incl. heritage/funcdata/
action) compiles clean, -std=c++11 -O2, NO BFD, NO bison (generated
parsers are committed upstream; ruleparse isn't in the lib set);
- sleigh compiler builds; AArch64 .slaspec -> .sla compiles;
- tools/pcode_dump.cpp (custom LoadImage, no BFD) lifts the real arm64
sym._div_by_zero_direct to correct P-Code: `mov w9,#0 -> COPY(const 0)`,
`sdiv -> INT_SDIV(w8,w9)` — divisor zero-ness explicit in the data flow,
so the Phase-3 encoder proves div-by-zero trivially, multi-arch.
Not yet meson-wired (next step) and no fold-side IR/encoder yet (Phase 2-3);
this commit is the validated vendor + smoke tool.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
119 lines
3.5 KiB
C++
Executable file
119 lines
3.5 KiB
C++
Executable file
/* ###
|
|
* IP: GHIDRA
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
#include "signature_ghidra.hh"
|
|
#include "signature.hh"
|
|
|
|
namespace ghidra {
|
|
|
|
// Constructing the singleton registers the capability
|
|
GhidraSignatureCapability GhidraSignatureCapability::ghidraSignatureCapability;
|
|
|
|
void GhidraSignatureCapability::initialize(void)
|
|
|
|
{
|
|
commandmap["generateSignatures"] = new SignaturesAt(false);
|
|
commandmap["debugSignatures"] = new SignaturesAt(true);
|
|
commandmap["getSignatureSettings"] = new GetSignatureSettings();
|
|
commandmap["setSignatureSettings"] = new SetSignatureSettings();
|
|
}
|
|
|
|
void SignaturesAt::loadParameters(void)
|
|
|
|
{
|
|
GhidraCommand::loadParameters();
|
|
PackedDecode decoder(ghidra);
|
|
ArchitectureGhidra::readStringStream(sin,decoder);
|
|
addr = Address::decode(decoder); // Parse XML for functions address
|
|
}
|
|
|
|
void SignaturesAt::rawAction(void)
|
|
|
|
{
|
|
Funcdata *fd = ghidra->symboltab->getGlobalScope()->queryFunction(addr);
|
|
if (fd == (Funcdata *)0) {
|
|
ostringstream s;
|
|
s << "Bad address for signatures: " << addr.getShortcut();
|
|
addr.printRaw(s);
|
|
s << '\n';
|
|
throw LowlevelError(s.str());
|
|
}
|
|
if (!fd->isProcStarted()) {
|
|
string curname = ghidra->allacts.getCurrentName();
|
|
Action *sigact;
|
|
if (curname != "normalize")
|
|
sigact = ghidra->allacts.setCurrent("normalize");
|
|
else
|
|
sigact = ghidra->allacts.getCurrent();
|
|
#ifdef __REMOTE_SOCKET__
|
|
connect_to_console(fd);
|
|
#endif
|
|
sigact->reset(*fd);
|
|
sigact->perform(*fd);
|
|
if (curname != "normalize")
|
|
ghidra->allacts.setCurrent(curname);
|
|
}
|
|
|
|
sout.write("\000\000\001\016",4);
|
|
PackedEncode encoder(sout); // Write output XML directly to outstream
|
|
if (debug)
|
|
debugSignature(fd,encoder);
|
|
else
|
|
simpleSignature(fd,encoder);
|
|
sout.write("\000\000\001\017",4);
|
|
}
|
|
|
|
void GetSignatureSettings::rawAction(void)
|
|
|
|
{
|
|
sout.write("\000\000\001\016",4); // Write output XML directly to outstream
|
|
PackedEncode encoder(sout);
|
|
encoder.openElement(ELEM_SIGSETTINGS);
|
|
encoder.openElement(ELEM_MAJOR);
|
|
encoder.writeSignedInteger(ATTRIB_CONTENT, ArchitectureCapability::getMajorVersion());
|
|
encoder.closeElement(ELEM_MAJOR);
|
|
encoder.openElement(ELEM_MINOR);
|
|
encoder.writeSignedInteger(ATTRIB_CONTENT, ArchitectureCapability::getMinorVersion());
|
|
encoder.closeElement(ELEM_MINOR);
|
|
encoder.openElement(ELEM_SETTINGS);
|
|
encoder.writeUnsignedInteger(ATTRIB_CONTENT, SigManager::getSettings());
|
|
encoder.closeElement(ELEM_SETTINGS);
|
|
encoder.closeElement(ELEM_SIGSETTINGS);
|
|
sout.write("\000\000\001\017",4);
|
|
}
|
|
|
|
void SetSignatureSettings::loadParameters(void)
|
|
|
|
{
|
|
string settingString;
|
|
GhidraCommand::loadParameters();
|
|
ArchitectureGhidra::readStringStream(sin,settingString);
|
|
istringstream s(settingString);
|
|
s.unsetf(ios::dec | ios::hex | ios::oct);
|
|
s >> settings;
|
|
}
|
|
|
|
void SetSignatureSettings::rawAction(void)
|
|
|
|
{
|
|
if (GraphSigManager::testSettings(settings)) {
|
|
SigManager::setSettings(settings);
|
|
ArchitectureGhidra::writeStringStream(sout,"t");
|
|
}
|
|
else
|
|
ArchitectureGhidra::writeStringStream(sout,"f");
|
|
}
|
|
|
|
} // End namespace ghidra
|