Foundation for replacing fold's dead/abstract binary encoder with a real
SSA P-Code frontend. Verified root-cause gap: serializeBinaryIR() emits only
data-discovery nodes (sections/strings/imports/exports); the control-flow
BinaryExprKind values (BasicBlock/CallSite/...) are never constructed, so the
Z3-BB encoder's encodable filter is always empty and encodeBinaryBBs never
runs — hence 0 binary Z3 findings. The P-Code pipeline supersedes that path.
Phase 0 — docs/internal/ghidra-pcode-integration-research.md: P-Code opcode
core, the decompiler C++ embedding API (LoadImage/SleighArchitecture/Funcdata),
the CORE+DECCORE+SLEIGH source sets, no-bison finding, and pypcode as build
reference.
Phase 1 — vendored Ghidra decompiler at pinned commit (Ghidra_12.1_build,
7e89d94e34...) under third_party/ghidra-decompiler/ (cpp + AArch64 specs +
Apache-2.0 LICENSE + VENDOR.md + .gitignore for build artifacts). Validated by
hand on this clang-21/macOS toolchain:
- full SSA engine (CORE+DECCORE+SLEIGH, 80 files incl. heritage/funcdata/
action) compiles clean, -std=c++11 -O2, NO BFD, NO bison (generated
parsers are committed upstream; ruleparse isn't in the lib set);
- sleigh compiler builds; AArch64 .slaspec -> .sla compiles;
- tools/pcode_dump.cpp (custom LoadImage, no BFD) lifts the real arm64
sym._div_by_zero_direct to correct P-Code: `mov w9,#0 -> COPY(const 0)`,
`sdiv -> INT_SDIV(w8,w9)` — divisor zero-ness explicit in the data flow,
so the Phase-3 encoder proves div-by-zero trivially, multi-arch.
Not yet meson-wired (next step) and no fold-side IR/encoder yet (Phase 2-3);
this commit is the validated vendor + smoke tool.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
159 lines
4.2 KiB
C++
159 lines
4.2 KiB
C++
/* ###
|
|
* IP: GHIDRA
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
#include "xml_arch.hh"
|
|
|
|
namespace ghidra {
|
|
|
|
ElementId ELEM_XML_SAVEFILE = ElementId("xml_savefile",236);
|
|
|
|
// Constructing the singleton registers the capability
|
|
XmlArchitectureCapability XmlArchitectureCapability::xmlArchitectureCapability;
|
|
|
|
XmlArchitectureCapability::XmlArchitectureCapability(void)
|
|
|
|
{
|
|
name = "xml";
|
|
}
|
|
|
|
XmlArchitectureCapability::~XmlArchitectureCapability(void)
|
|
|
|
{
|
|
SleighArchitecture::shutdown();
|
|
}
|
|
|
|
Architecture *XmlArchitectureCapability::buildArchitecture(const string &filename,const string &target,ostream *estream)
|
|
|
|
{
|
|
return new XmlArchitecture(filename,target,estream);
|
|
}
|
|
|
|
bool XmlArchitectureCapability::isFileMatch(const string &filename) const
|
|
|
|
{
|
|
ifstream s(filename.c_str());
|
|
if (!s)
|
|
return false;
|
|
int4 val1,val2,val3;
|
|
s >> ws;
|
|
val1 = s.get();
|
|
val2 = s.get();
|
|
val3 = s.get();
|
|
s.close();
|
|
if ((val1=='<')&&(val2=='b')&&(val3=='i')) // Probably <binaryimage> tag
|
|
return true;
|
|
return false;
|
|
}
|
|
|
|
bool XmlArchitectureCapability::isXmlMatch(Document *doc) const
|
|
|
|
{
|
|
return (doc->getRoot()->getName() == "xml_savefile");
|
|
}
|
|
|
|
void XmlArchitecture::buildLoader(DocumentStorage &store)
|
|
|
|
{
|
|
collectSpecFiles(*errorstream);
|
|
const Element *el = store.getTag("binaryimage");
|
|
if (el == (const Element *)0) {
|
|
Document *doc = store.openDocument(getFilename());
|
|
store.registerTag(doc->getRoot());
|
|
el = store.getTag("binaryimage");
|
|
}
|
|
if (el == (const Element *)0)
|
|
throw LowlevelError("Could not find binaryimage tag");
|
|
loader = new LoadImageXml(getFilename(),el);
|
|
}
|
|
|
|
/// Read in image information (which uses translator)
|
|
void XmlArchitecture::postSpecFile(void)
|
|
|
|
{
|
|
Architecture::postSpecFile();
|
|
((LoadImageXml *)loader)->open(translate);
|
|
if (adjustvma != 0)
|
|
loader->adjustVma(adjustvma);
|
|
}
|
|
|
|
/// This just wraps the base constructor
|
|
/// \param fname is the path to the executable file (containing XML)
|
|
/// \param targ is the (optional) language id
|
|
/// \param estream is the stream to use for the error console
|
|
XmlArchitecture::XmlArchitecture(const string &fname,const string &targ,ostream *estream)
|
|
: SleighArchitecture(fname,targ,estream)
|
|
|
|
{
|
|
adjustvma = 0;
|
|
}
|
|
|
|
/// Prepend extra stuff to specify binary file and spec
|
|
/// \param encoder is the stream encoder
|
|
void XmlArchitecture::encode(Encoder &encoder) const
|
|
|
|
{
|
|
encoder.openElement(ELEM_XML_SAVEFILE);
|
|
encodeHeader(encoder);
|
|
encoder.writeUnsignedInteger(ATTRIB_ADJUSTVMA, adjustvma);
|
|
((LoadImageXml *)loader)->encode(encoder); // Save the LoadImage
|
|
types->encodeCoreTypes(encoder);
|
|
SleighArchitecture::encode(encoder); // Save the rest of the state
|
|
encoder.closeElement(ELEM_XML_SAVEFILE);
|
|
}
|
|
|
|
void XmlArchitecture::restoreXml(DocumentStorage &store)
|
|
|
|
{
|
|
const Element *el = store.getTag("xml_savefile");
|
|
if (el == (const Element *)0)
|
|
throw LowlevelError("Could not find xml_savefile tag");
|
|
|
|
restoreXmlHeader(el);
|
|
{
|
|
istringstream s( el->getAttributeValue("adjustvma"));
|
|
s.unsetf(ios::dec | ios::hex | ios::oct);
|
|
s >> adjustvma;
|
|
}
|
|
const List &list(el->getChildren());
|
|
List::const_iterator iter;
|
|
|
|
iter = list.begin();
|
|
if (iter!=list.end()) {
|
|
if ((*iter)->getName() == "binaryimage") {
|
|
store.registerTag(*iter);
|
|
++iter;
|
|
}
|
|
}
|
|
if (iter != list.end()) {
|
|
if ((*iter)->getName() == "specextensions") {
|
|
store.registerTag(*iter);
|
|
++iter;
|
|
}
|
|
}
|
|
if (iter!=list.end()) {
|
|
if ((*iter)->getName() == "coretypes") {
|
|
store.registerTag(*iter);
|
|
++iter;
|
|
}
|
|
}
|
|
init(store); // Load the image and configure
|
|
|
|
if (iter != list.end()) {
|
|
store.registerTag(*iter);
|
|
SleighArchitecture::restoreXml(store);
|
|
}
|
|
}
|
|
|
|
} // End namespace ghidra
|