diff options
Diffstat (limited to 'example/expression')
| -rw-r--r-- | example/expression/manip_expression2.py | 10 | ||||
| -rw-r--r-- | example/expression/manip_expression4.py | 34 | ||||
| -rw-r--r-- | example/expression/manip_expression6.py | 16 | ||||
| -rw-r--r-- | example/expression/solve_condition_stp.py | 37 |
4 files changed, 50 insertions, 47 deletions
diff --git a/example/expression/manip_expression2.py b/example/expression/manip_expression2.py index 4153f875..faa3f9df 100644 --- a/example/expression/manip_expression2.py +++ b/example/expression/manip_expression2.py @@ -7,20 +7,20 @@ Get read/written registers for a given instruction """ arch = mn_x86 -my_ir = ir_a_x86_32() +ir_arch = ir_a_x86_32() l = arch.fromstring('LODSB', 32) l.offset, l.l = 0, 15 -my_ir.add_instr(l) +ir_arch.add_instr(l) print '*' * 80 -for lbl, b in my_ir.blocs.items(): +for lbl, b in ir_arch.blocs.items(): print b for irs in b.irs: o_r, o_w = get_rw(irs) print 'read: ', [str(x) for x in o_r] print 'written:', [str(x) for x in o_w] print -my_ir.gen_graph() -g = my_ir.graph() +ir_arch.gen_graph() +g = ir_arch.graph() open('graph_instr.txt', 'w').write(g) diff --git a/example/expression/manip_expression4.py b/example/expression/manip_expression4.py index f4a55a3c..bbf721f7 100644 --- a/example/expression/manip_expression4.py +++ b/example/expression/manip_expression4.py @@ -71,11 +71,11 @@ def get_modified_symbols(sb): return out -def intra_bloc_flow_symb(my_ir, flow_graph, irbloc): +def intra_bloc_flow_symb(ir_arch, flow_graph, irbloc): symbols_init = {} for i, r in enumerate(all_regs_ids): symbols_init[r] = all_regs_ids_init[i] - sb = symbexec(mn_x86, symbols_init) + sb = symbexec(ir_arch, symbols_init) sb.emulbloc(irbloc) print '*' * 40 print irbloc @@ -138,19 +138,19 @@ def node2str(self, n): return out -def gen_bloc_data_flow_graph(my_ir, in_str, ad): # arch, attrib, pool_bin, bloc, symbol_pool): +def gen_bloc_data_flow_graph(ir_arch, in_str, ad): # arch, attrib, pool_bin, bloc, symbol_pool): out_str = "" - # my_ir = ir_x86_32(symbol_pool) + # ir_arch = ir_x86_32(symbol_pool) - for irbloc in my_ir.blocs.values(): + for irbloc in ir_arch.blocs.values(): print irbloc - my_ir.gen_graph() - my_ir.dead_simp() + ir_arch.gen_graph() + ir_arch.dead_simp() irbloc_0 = None - for irbloc in my_ir.blocs.values(): + for irbloc in ir_arch.blocs.values(): if irbloc.label.offset == ad: irbloc_0 = irbloc break @@ -162,17 +162,17 @@ def gen_bloc_data_flow_graph(my_ir, in_str, ad): # arch, attrib, pool_bin, bloc bloc2w = {} - for irbloc in my_ir.blocs.values(): - intra_bloc_flow_raw(my_ir, flow_graph, irbloc) - # intra_bloc_flow_symb(my_ir, flow_graph, irbloc) + for irbloc in ir_arch.blocs.values(): + intra_bloc_flow_raw(ir_arch, flow_graph, irbloc) + # intra_bloc_flow_symb(ir_arch, flow_graph, irbloc) - for irbloc in my_ir.blocs.values(): + for irbloc in ir_arch.blocs.values(): print irbloc print 'IN', [str(x) for x in irbloc.in_nodes] print 'OUT', [str(x) for x in irbloc.out_nodes] print '*' * 20, 'interbloc', '*' * 20 - inter_bloc_flow(my_ir, flow_graph, irbloc_0.label) + inter_bloc_flow(ir_arch, flow_graph, irbloc_0.label) # sys.path.append('/home/serpilliere/projet/m2_devel/miasm2/core') # from graph_qt import graph_qt @@ -191,19 +191,19 @@ print 'ok' print 'generating dataflow graph for:' -my_ir = ir_a_x86_32(mdis.symbol_pool) +ir_arch = ir_a_x86_32(mdis.symbol_pool) blocs = ab for bloc in blocs: print bloc - my_ir.add_bloc(bloc) -for irbloc in my_ir.blocs.values(): + ir_arch.add_bloc(bloc) +for irbloc in ir_arch.blocs.values(): print irbloc if irbloc.label.offset != 0: continue -out_str = gen_bloc_data_flow_graph(my_ir, mdis.bs, ad) +out_str = gen_bloc_data_flow_graph(ir_arch, mdis.bs, ad) print '*' * 40 print """ diff --git a/example/expression/manip_expression6.py b/example/expression/manip_expression6.py index 45a6c8c1..b5fe0ec5 100644 --- a/example/expression/manip_expression6.py +++ b/example/expression/manip_expression6.py @@ -42,26 +42,26 @@ print symbol_pool resolved_b, patches = asmbloc.asm_resolve_final(mn_x86, 32, blocs, symbol_pool) # Translate to IR -my_ir = ir_a_x86_32(symbol_pool) +ir_arch = ir_a_x86_32(symbol_pool) for b in blocs: print 'add bloc' print b - my_ir.add_bloc(b) + ir_arch.add_bloc(b) # Display IR -for lbl, b in my_ir.blocs.items(): +for lbl, b in ir_arch.blocs.items(): print b # Dead propagation -my_ir.gen_graph() -out = my_ir.graph() +ir_arch.gen_graph() +out = ir_arch.graph() open('graph.txt', 'w').write(out) print '*' * 80 -my_ir.dead_simp() -out2 = my_ir.graph() +ir_arch.dead_simp() +out2 = ir_arch.graph() open('graph2.txt', 'w').write(out2) # Display new IR print 'new ir blocs' -for lbl, b in my_ir.blocs.items(): +for lbl, b in ir_arch.blocs.items(): print b diff --git a/example/expression/solve_condition_stp.py b/example/expression/solve_condition_stp.py index 828629fc..659124d1 100644 --- a/example/expression/solve_condition_stp.py +++ b/example/expression/solve_condition_stp.py @@ -17,6 +17,8 @@ from elfesteem.strpatchwork import StrPatchwork from miasm2.arch.x86.disasm import dis_x86_32 as dis_engine +from pdb import pm + filename = os.environ.get('PYTHONSTARTUP') if filename and os.path.isfile(filename): @@ -35,22 +37,22 @@ if not args: sys.exit(0) -def get_bloc(my_ir, mdis, ad): +def get_bloc(ir_arch, mdis, ad): if isinstance(ad, asmbloc.asm_label): l = ad else: l = mdis.symbol_pool.getby_offset_create(ad) - if not l in my_ir.blocs: + if not l in ir_arch.blocs: ad = l.offset b = mdis.dis_bloc(ad) - my_ir.add_bloc(b) - b = my_ir.get_bloc(l) + ir_arch.add_bloc(b) + b = ir_arch.get_bloc(l) if b is None: raise LookupError('no bloc found at that address: %s' % l) return b -def emul_symb(my_ir, mdis, states_todo, states_done): +def emul_symb(ir_arch, mdis, states_todo, states_done): while states_todo: ad, symbols, conds = states_todo.pop() print '*' * 40, "addr", ad, '*' * 40 @@ -58,11 +60,11 @@ def emul_symb(my_ir, mdis, states_todo, states_done): print 'skip', ad continue states_done.add((ad, symbols, conds)) - sb = symbexec(mn, {}) + sb = symbexec(ir_arch, {}) sb.symbols = symbols.copy() - if my_ir.pc in sb.symbols: - del(sb.symbols[my_ir.pc]) - b = get_bloc(my_ir, mdis, ad) + if ir_arch.pc in sb.symbols: + del(sb.symbols[ir_arch.pc]) + b = get_bloc(ir_arch, mdis, ad) print 'run bloc' print b @@ -156,7 +158,9 @@ if __name__ == '__main__': my_symbols = dict([(x.name, x) for x in my_symbols]) my_symbols.update(mn_x86.regs.all_regs_ids_byname) - sb = symbexec(mn, symbols_init) + ir_arch = ir_x86_32(mdis.symbol_pool) + + sb = symbexec(ir_arch, symbols_init) blocs, symbol_pool = parse_asm.parse_txt(mn_x86, 32, ''' PUSH argv @@ -164,27 +168,26 @@ if __name__ == '__main__': PUSH ret_addr ''') - my_ir = ir_x86_32(mdis.symbol_pool) b = blocs[0][0] print b # add fake address and len to parsed instructions for i, l in enumerate(b.lines): l.offset, l.l = i, 1 - my_ir.add_bloc(b) - irb = get_bloc(my_ir, mdis, 0) + ir_arch.add_bloc(b) + irb = get_bloc(ir_arch, mdis, 0) sb.emulbloc(irb) sb.dump_mem() - # reset my_ir blocs - my_ir.blocs = {} + # reset ir_arch blocs + ir_arch.blocs = {} states_todo = set() states_done = set() states_todo.add((uint32(ad), sb.symbols, ())) # emul blocs, propagate states - emul_symb(my_ir, mdis, states_todo, states_done) + emul_symb(ir_arch, mdis, states_todo, states_done) all_info = [] @@ -199,7 +202,7 @@ if __name__ == '__main__': all_cases = set() - sb = symbexec(mn, symbols_init) + sb = symbexec(ir_arch, symbols_init) for ad, reqs_cond in all_info: all_ids = set() for k, v in reqs_cond: |