def create_containing_record(self, expression, index, offset): negative_lvar = self.negative_lvars[index] # print "[DEBUG] Rebuilding negative offset", negative_lvar.offset, offset, negative_lvar.parent_tinfo.dstr() diff = negative_lvar.offset + offset arg_address = idaapi.carg_t() if expression.op == idaapi.cot_var: arg_address.consume_cexpr(expression) else: arg_address.consume_cexpr(expression.x) arg_type = idaapi.carg_t() cexpr_helper = idaapi.create_helper(True, self.pvoid_tinfo, negative_lvar.parent_tinfo.dstr()) arg_type.consume_cexpr(cexpr_helper) arg_field = idaapi.carg_t() cexpr_helper = idaapi.create_helper(True, self.pvoid_tinfo, negative_lvar.member_name) arg_field.consume_cexpr(cexpr_helper) return_tinfo = idaapi.tinfo_t(negative_lvar.parent_tinfo) return_tinfo.create_ptr(return_tinfo) new_cexpr_call = idaapi.call_helper(return_tinfo, None, "CONTAINING_RECORD") new_cexpr_call.a.push_back(arg_address) new_cexpr_call.a.push_back(arg_type) new_cexpr_call.a.push_back(arg_field) # new_cexpr_call.ea = expression.ea # new_cexpr_call.x.ea = expression.ea parent = reversed(self.parents).next().cexpr if diff: number = idaapi.make_num(diff) new_cexpr_add = idaapi.cexpr_t(idaapi.cot_add, new_cexpr_call, number) new_cexpr_add.thisown = False new_cexpr_add.type = return_tinfo if parent.op == idaapi.cot_ptr: tmp_tinfo = idaapi.tinfo_t() tmp_tinfo.create_ptr(parent.type) new_cexpr_cast = idaapi.cexpr_t(idaapi.cot_cast, new_cexpr_add) new_cexpr_cast.thisown = False new_cexpr_cast.type = tmp_tinfo expression.replace_by(new_cexpr_cast) else: expression.replace_by(new_cexpr_add) else: if parent.op == idaapi.cot_ptr: tmp_tinfo = idaapi.tinfo_t() tmp_tinfo.create_ptr(parent.type) new_cexpr_cast = idaapi.cexpr_t(idaapi.cot_cast, new_cexpr_call) new_cexpr_cast.thisown = False new_cexpr_cast.type = tmp_tinfo expression.replace_by(new_cexpr_cast) else: expression.replace_by(new_cexpr_call)
def on_matched_item(self, item, ctx: PatternContext): helper_args = [] if_expr = ctx.get_expr("if_expr") if if_expr is not None: arg1 = idaapi.carg_t() arg1.assign(if_expr) helper_args.append(arg1) exception_str = ctx.get_expr("exception_str") if exception_str is not None: if exception_str.op == idaapi.cot_obj: arg2 = idaapi.carg_t() arg2.assign(exception_str) helper_args.append(arg2) new_item = make_call_helper_instr("__throw_if", *helper_args) ctx.modify_instr(item, new_item) return False
def make_call_helper_expr(name, *args, retval=None): if retval is None: retval = idaapi.get_unk_type(8) arglist = idaapi.carglist_t() for arg in args: if arg is None: print("[!] Warning: argument is None, skipping") continue if isinstance(arg, idaapi.carg_t): arglist.push_back(arg) else: narg = idaapi.carg_t() narg.assign(arg) arglist.push_back(narg) return idaapi.call_helper(retval, arglist, name)
def create_containing_record(self, expression, index, offset): negative_lvar = self.negative_lvars[index] logger.debug("Creating CONTAINING_RECORD macro, offset: {}, negative offset: {}, TYPE: {}".format( negative_lvar.offset, offset, negative_lvar.parent_tinfo.dstr() )) arg_address = idaapi.carg_t() if expression.op == idaapi.cot_var: arg_address.assign(expression) else: arg_address.assign(expression.x) arg_type = idaapi.carg_t() cexpr_helper = idaapi.create_helper(True, self.pvoid_tinfo, negative_lvar.parent_tinfo.dstr()) arg_type.assign(cexpr_helper) arg_field = idaapi.carg_t() cexpr_helper = idaapi.create_helper( True, self.pvoid_tinfo, negative_lvar.member_name ) arg_field.assign(cexpr_helper) return_tinfo = idaapi.tinfo_t(negative_lvar.parent_tinfo) return_tinfo.create_ptr(return_tinfo) new_cexpr_call = idaapi.call_helper(return_tinfo, None, "CONTAINING_RECORD") new_cexpr_call.a.push_back(arg_address) new_cexpr_call.a.push_back(arg_type) new_cexpr_call.a.push_back(arg_field) new_cexpr_call.thisown = False parent = reversed(self.parents).next().cexpr diff = negative_lvar.offset + offset if diff: number = idaapi.make_num(diff) number.thisown = False new_cexpr_add = Helper.my_cexpr_t(idaapi.cot_add, x=new_cexpr_call, y=number) new_cexpr_add.type = return_tinfo if parent.op == idaapi.cot_ptr: tmp_tinfo = idaapi.tinfo_t() tmp_tinfo.create_ptr(parent.type) new_cexpr_cast = Helper.my_cexpr_t(idaapi.cot_cast, x=new_cexpr_add) new_cexpr_cast.thisown = False new_cexpr_cast.type = tmp_tinfo expression.assign(new_cexpr_cast) else: expression.assign(new_cexpr_add) else: if parent.op == idaapi.cot_ptr: tmp_tinfo = idaapi.tinfo_t() tmp_tinfo.create_ptr(parent.type) new_cexpr_cast = Helper.my_cexpr_t(idaapi.cot_cast, x=new_cexpr_call) new_cexpr_cast.thisown = False new_cexpr_cast.type = tmp_tinfo expression.assign(new_cexpr_cast) else: expression.assign(new_cexpr_call)