fold/third_party/ghidra-decompiler/cpp/bfd_arch.cc
trvon 5152d0c9f7
feat(binary): vendor Ghidra 12.1 decompiler + validate P-Code lifting (Phase 0-1)
Foundation for replacing fold's dead/abstract binary encoder with a real
SSA P-Code frontend. Verified root-cause gap: serializeBinaryIR() emits only
data-discovery nodes (sections/strings/imports/exports); the control-flow
BinaryExprKind values (BasicBlock/CallSite/...) are never constructed, so the
Z3-BB encoder's encodable filter is always empty and encodeBinaryBBs never
runs — hence 0 binary Z3 findings. The P-Code pipeline supersedes that path.

Phase 0 — docs/internal/ghidra-pcode-integration-research.md: P-Code opcode
core, the decompiler C++ embedding API (LoadImage/SleighArchitecture/Funcdata),
the CORE+DECCORE+SLEIGH source sets, no-bison finding, and pypcode as build
reference.

Phase 1 — vendored Ghidra decompiler at pinned commit (Ghidra_12.1_build,
7e89d94e34...) under third_party/ghidra-decompiler/ (cpp + AArch64 specs +
Apache-2.0 LICENSE + VENDOR.md + .gitignore for build artifacts). Validated by
hand on this clang-21/macOS toolchain:
  - full SSA engine (CORE+DECCORE+SLEIGH, 80 files incl. heritage/funcdata/
    action) compiles clean, -std=c++11 -O2, NO BFD, NO bison (generated
    parsers are committed upstream; ruleparse isn't in the lib set);
  - sleigh compiler builds; AArch64 .slaspec -> .sla compiles;
  - tools/pcode_dump.cpp (custom LoadImage, no BFD) lifts the real arm64
    sym._div_by_zero_direct to correct P-Code: `mov w9,#0 -> COPY(const 0)`,
    `sdiv -> INT_SDIV(w8,w9)` — divisor zero-ness explicit in the data flow,
    so the Phase-3 encoder proves div-by-zero trivially, multi-arch.

Not yet meson-wired (next step) and no fold-side IR/encoder yet (Phase 2-3);
this commit is the validated vendor + smoke tool.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-05-31 17:32:47 -04:00

175 lines
5 KiB
C++

/* ###
* IP: GHIDRA
* NOTE: Excluded from Build. Used for development only in support of console mode - Links to GNU BFD library which is GPL 3
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include "bfd_arch.hh"
namespace ghidra {
// Constructing this object registers capability
BfdArchitectureCapability BfdArchitectureCapability::bfdArchitectureCapability;
ElementId ELEM_BFD_SAVEFILE = ElementId("bfd_savefile",238);
BfdArchitectureCapability::BfdArchitectureCapability(void)
{
name = "bfd";
}
BfdArchitectureCapability::~BfdArchitectureCapability(void)
{
SleighArchitecture::shutdown();
}
Architecture *BfdArchitectureCapability::buildArchitecture(const string &filename,const string &target,ostream *estream)
{
return new BfdArchitecture(filename,target,estream);
}
bool BfdArchitectureCapability::isFileMatch(const string &filename) const
{
ifstream s(filename.c_str());
if (!s)
return false;
int4 val1,val2,val3;
s >> ws;
val1 = s.get();
val2 = s.get();
val3 = s.get();
s.close();
if ((val1=='<')&&(val2=='b')&&(val3=='i'))
return false; // Probably XML, not BFD
return true;
}
bool BfdArchitectureCapability::isXmlMatch(Document *doc) const
{
return (doc->getRoot()->getName() == "bfd_savefile");
}
void BfdArchitecture::buildLoader(DocumentStorage &store)
{
LoadImageBfd *ldr;
collectSpecFiles(*errorstream);
if (getTarget().find("binary")==0)
ldr = new LoadImageBfd(getFilename(),"binary");
else if (getTarget().find("default")==0)
ldr = new LoadImageBfd(getFilename(),"default");
else
ldr = new LoadImageBfd(getFilename(),getTarget());
ldr->open();
if (adjustvma!=0)
ldr->adjustVma(adjustvma);
loader = ldr;
}
void BfdArchitecture::resolveArchitecture(void)
{
archid = getTarget();
if (archid.find(':')==string::npos) {
archid = loader->getArchType();
// kludge to distinguish windows binaries from linux/gcc
if (archid.find("efi-app-ia32") != string::npos)
archid = "x86:LE:32:default:windows";
else if (archid.find("pe-i386") != string::npos)
archid = "x86:LE:32:default:windows";
else if (archid.find("pei-i386") != string::npos)
archid = "x86:LE:32:default:windows";
else if (archid.find("pei-x86-64") != string::npos)
archid = "x86:LE:64:default:windows";
else if (archid.find("sparc") != string::npos)
archid = "sparc:BE:32:default:default";
else if (archid.find("elf64") != string::npos)
archid = "x86:LE:64:default:gcc";
else if (archid.find("elf") != string::npos)
archid = "x86:LE:32:default:gcc";
else if (archid.find("mach-o") != string::npos)
archid = "PowerPC:BE:32:default:macosx";
else
throw LowlevelError("Cannot convert bfd target to sleigh target: "+archid);
}
SleighArchitecture::resolveArchitecture();
}
void BfdArchitecture::postSpecFile(void)
{ // Attach default space to loader
Architecture::postSpecFile();
((LoadImageBfd *)loader)->attachToSpace(getDefaultCodeSpace());
}
/// This just wraps the base class constructor
/// \param fname is the path to the executable file
/// \param targ is the (optional) language id to use for the file
/// \param estream is the stream to use for the error console
BfdArchitecture::BfdArchitecture(const string &fname,const string &targ,ostream *estream)
: SleighArchitecture(fname,targ,estream)
{ // Select architecture from string
adjustvma = 0;
}
void BfdArchitecture::encode(Encoder &encoder) const
{ // prepend extra stuff to specify binary file and spec
encoder.openElement(ELEM_BFD_SAVEFILE);
encodeHeader(encoder);
encoder.writeUnsignedInteger(ATTRIB_ADJUSTVMA, adjustvma);
types->encodeCoreTypes(encoder);
SleighArchitecture::encode(encoder); // Save the rest of the state
encoder.closeElement(ELEM_BFD_SAVEFILE);
}
void BfdArchitecture::restoreXml(DocumentStorage &store)
{
const Element *el = store.getTag("bfd_savefile");
if (el == (const Element *)0)
throw LowlevelError("Could not find bfd_savefile tag");
restoreXmlHeader(el);
{
istringstream s( el->getAttributeValue("adjustvma"));
s.unsetf(ios::dec | ios::hex | ios::oct);
s >> adjustvma;
}
const List &list(el->getChildren());
List::const_iterator iter;
iter = list.begin();
if (iter != list.end()) {
if ((*iter)->getName() == "coretypes") {
store.registerTag(*iter);
++iter;
}
}
init(store); // Load the image and configure
if (iter != list.end()) {
store.registerTag(*iter);
SleighArchitecture::restoreXml(store);
}
}
} // End namespace ghidra