5152d0c9f7
Foundation for replacing fold's dead/abstract binary encoder with a real
SSA P-Code frontend. Verified root-cause gap: serializeBinaryIR() emits only
data-discovery nodes (sections/strings/imports/exports); the control-flow
BinaryExprKind values (BasicBlock/CallSite/...) are never constructed, so the
Z3-BB encoder's encodable filter is always empty and encodeBinaryBBs never
runs — hence 0 binary Z3 findings. The P-Code pipeline supersedes that path.
Phase 0 — docs/internal/ghidra-pcode-integration-research.md: P-Code opcode
core, the decompiler C++ embedding API (LoadImage/SleighArchitecture/Funcdata),
the CORE+DECCORE+SLEIGH source sets, no-bison finding, and pypcode as build
reference.
Phase 1 — vendored Ghidra decompiler at pinned commit (Ghidra_12.1_build,
7e89d94e34...) under third_party/ghidra-decompiler/ (cpp + AArch64 specs +
Apache-2.0 LICENSE + VENDOR.md + .gitignore for build artifacts). Validated by
hand on this clang-21/macOS toolchain:
- full SSA engine (CORE+DECCORE+SLEIGH, 80 files incl. heritage/funcdata/
action) compiles clean, -std=c++11 -O2, NO BFD, NO bison (generated
parsers are committed upstream; ruleparse isn't in the lib set);
- sleigh compiler builds; AArch64 .slaspec -> .sla compiles;
- tools/pcode_dump.cpp (custom LoadImage, no BFD) lifts the real arm64
sym._div_by_zero_direct to correct P-Code: `mov w9,#0 -> COPY(const 0)`,
`sdiv -> INT_SDIV(w8,w9)` — divisor zero-ness explicit in the data flow,
so the Phase-3 encoder proves div-by-zero trivially, multi-arch.
Not yet meson-wired (next step) and no fold-side IR/encoder yet (Phase 2-3);
this commit is the validated vendor + smoke tool.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
263 lines
8.1 KiB
XML
263 lines
8.1 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
|
|
<compiler_spec>
|
|
<data_organization>
|
|
<absolute_max_alignment value="0" />
|
|
<machine_alignment value="4" />
|
|
<default_alignment value="1" />
|
|
<default_pointer_alignment value="8" />
|
|
<pointer_size value="8" />
|
|
<wchar_size value="4" />
|
|
<short_size value="2" />
|
|
<integer_size value="4" />
|
|
<long_size value="8" />
|
|
<long_long_size value="8" />
|
|
<float_size value="4" />
|
|
<double_size value="8" />
|
|
<long_double_size value="8" />
|
|
<size_alignment_map>
|
|
<entry size="1" alignment="1" />
|
|
<entry size="2" alignment="2" />
|
|
<entry size="4" alignment="4" />
|
|
<entry size="8" alignment="8" />
|
|
<entry size="16" alignment="16"/>
|
|
</size_alignment_map>
|
|
</data_organization>
|
|
|
|
<global>
|
|
<range space="ram"/>
|
|
</global>
|
|
|
|
<stackpointer register="sp" space="ram"/>
|
|
<funcptr align="4"/> <!-- Function pointers are word aligned and leastsig bit may encode otherstuff -->
|
|
|
|
<prefersplit style="inhalf">
|
|
<register name="q0"/>
|
|
<register name="q1"/>
|
|
<register name="q2"/>
|
|
<register name="q3"/>
|
|
<register name="q4"/>
|
|
<register name="q5"/>
|
|
<register name="q6"/>
|
|
<register name="q7"/>
|
|
<register name="q8"/>
|
|
<register name="q9"/>
|
|
<register name="q10"/>
|
|
<register name="q11"/>
|
|
<register name="q12"/>
|
|
<register name="q13"/>
|
|
<register name="q14"/>
|
|
<register name="q15"/>
|
|
<register name="q16"/>
|
|
<register name="q17"/>
|
|
<register name="q18"/>
|
|
<register name="q19"/>
|
|
<register name="q20"/>
|
|
<register name="q21"/>
|
|
<register name="q22"/>
|
|
<register name="q23"/>
|
|
<register name="q24"/>
|
|
<register name="q25"/>
|
|
<register name="q26"/>
|
|
<register name="q27"/>
|
|
<register name="q28"/>
|
|
<register name="q29"/>
|
|
<register name="q30"/>
|
|
</prefersplit>
|
|
|
|
<default_proto>
|
|
<prototype name="__cdecl" extrapop="0" stackshift="0">
|
|
<input>
|
|
<pentry minsize="8" maxsize="8" storage="hiddenret">
|
|
<register name="x8"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="16" storage="float">
|
|
<register name="q0"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="16" storage="float">
|
|
<register name="q1"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="16" storage="float">
|
|
<register name="q2"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="16" storage="float">
|
|
<register name="q3"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="16" storage="float">
|
|
<register name="q4"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="16" storage="float">
|
|
<register name="q5"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="16" storage="float">
|
|
<register name="q6"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="16" storage="float">
|
|
<register name="q7"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="8" extension="zero">
|
|
<register name="x0"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="8" extension="zero">
|
|
<register name="x1"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="8" extension="zero">
|
|
<register name="x2"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="8" extension="zero">
|
|
<register name="x3"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="8" extension="zero">
|
|
<register name="x4"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="8" extension="zero">
|
|
<register name="x5"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="8" extension="zero">
|
|
<register name="x6"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="8" extension="zero">
|
|
<register name="x7"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="500" align="8">
|
|
<addr offset="0" space="stack"/>
|
|
</pentry>
|
|
<rule>
|
|
<datatype name="homogeneous-float-aggregate"/>
|
|
<join_per_primitive storage="float"/>
|
|
</rule>
|
|
<rule>
|
|
<datatype name="homogeneous-float-aggregate"/>
|
|
<goto_stack/> <!-- Don't consume general purpose registers -->
|
|
<consume_extra storage="float"/> <!-- Once the stack has been used, don't go back to registers -->
|
|
</rule>
|
|
<rule>
|
|
<datatype name="struct" minsize="17"/>
|
|
<convert_to_ptr/>
|
|
</rule>
|
|
<rule>
|
|
<datatype name="union" minsize="17"/>
|
|
<convert_to_ptr/>
|
|
</rule>
|
|
<rule>
|
|
<datatype name="float"/>
|
|
<consume storage="float"/>
|
|
</rule>
|
|
<rule>
|
|
<datatype name="float"/>
|
|
<goto_stack/> <!-- Don't consume general purpose registers -->
|
|
</rule>
|
|
<rule>
|
|
<datatype name="any"/>
|
|
<join align="true"/> <!-- Chunk from general purpose registers -->
|
|
</rule>
|
|
</input>
|
|
<output>
|
|
<pentry minsize="1" maxsize="16" storage="float">
|
|
<register name="q0"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="16" storage="float">
|
|
<register name="q1"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="16" storage="float">
|
|
<register name="q2"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="16" storage="float">
|
|
<register name="q3"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="8" extension="zero">
|
|
<register name="x0"/>
|
|
</pentry>
|
|
<pentry minsize="1" maxsize="8" extension="zero">
|
|
<register name="x1"/>
|
|
</pentry>
|
|
<rule>
|
|
<datatype name="homogeneous-float-aggregate"/>
|
|
<join_per_primitive storage="float"/>
|
|
</rule>
|
|
<rule>
|
|
<datatype name="float"/>
|
|
<consume storage="float"/>
|
|
</rule>
|
|
<rule>
|
|
<datatype name="any" minsize="17"/>
|
|
<hidden_return voidlock="true"/>
|
|
</rule>
|
|
<rule>
|
|
<datatype name="any"/>
|
|
<join/>
|
|
</rule>
|
|
</output>
|
|
<unaffected>
|
|
<register name="x19"/>
|
|
<register name="x20"/>
|
|
<register name="x21"/>
|
|
<register name="x22"/>
|
|
<register name="x23"/>
|
|
<register name="x24"/>
|
|
<register name="x25"/>
|
|
<register name="x26"/>
|
|
<register name="x27"/>
|
|
<register name="x28"/>
|
|
<register name="x29"/>
|
|
<register name="x30"/>
|
|
<register name="sp"/>
|
|
<!-- vectors -->
|
|
<register name="d8"/>
|
|
<register name="d9"/>
|
|
<register name="d10"/>
|
|
<register name="d11"/>
|
|
<register name="d12"/>
|
|
<register name="d13"/>
|
|
<register name="d14"/>
|
|
<register name="d15"/>
|
|
</unaffected>
|
|
<killedbycall>
|
|
<register name="x0"/>
|
|
<register name="x1"/>
|
|
<register name="q0"/>
|
|
<!-- x8: indirect result location register, which is not
|
|
reflected in the pentry list -->
|
|
<register name="x8"/>
|
|
<register name="x9"/>
|
|
<register name="x10"/>
|
|
<register name="x11"/>
|
|
<register name="x12"/>
|
|
<register name="x13"/>
|
|
<register name="x14"/>
|
|
<register name="x15"/>
|
|
<register name="x16"/>
|
|
<register name="x17"/>
|
|
<register name="x18"/>
|
|
<!-- vectors -->
|
|
<register name="d16"/>
|
|
<register name="d17"/>
|
|
<register name="d18"/>
|
|
<register name="d19"/>
|
|
<register name="d20"/>
|
|
<register name="d21"/>
|
|
<register name="d22"/>
|
|
<register name="d23"/>
|
|
<register name="d24"/>
|
|
<register name="d25"/>
|
|
<register name="d26"/>
|
|
<register name="d27"/>
|
|
<register name="d28"/>
|
|
<register name="d29"/>
|
|
<register name="d30"/>
|
|
<register name="d31"/>
|
|
</killedbycall>
|
|
</prototype>
|
|
</default_proto>
|
|
|
|
|
|
<callfixup name="PlaceHolderCallFixup"> <!-- This is here just to force call fixup and NoReturn fixup. Will be fixed in Ghidra V6.0 -->
|
|
<target name="___NotARealFunctionName___"/>
|
|
<pcode>
|
|
<body><![CDATA[
|
|
tmpptr:4 = 0;
|
|
]]></body>
|
|
</pcode>
|
|
</callfixup>
|
|
|
|
</compiler_spec>
|