def create_containing_record(self, expression, index, offset):
negative_lvar = self.negative_lvars[index]
# print "[DEBUG] Rebuilding negative offset", negative_lvar.offset, offset, negative_lvar.parent_tinfo.dstr()
diff = negative_lvar.offset + offset
arg_address = idaapi.carg_t()
if expression.op == idaapi.cot_var:
arg_address.consume_cexpr(expression)
else:
arg_address.consume_cexpr(expression.x)
arg_type = idaapi.carg_t()
cexpr_helper = idaapi.create_helper(True, self.pvoid_tinfo,
negative_lvar.parent_tinfo.dstr())
arg_type.consume_cexpr(cexpr_helper)
arg_field = idaapi.carg_t()
cexpr_helper = idaapi.create_helper(True, self.pvoid_tinfo,
negative_lvar.member_name)
arg_field.consume_cexpr(cexpr_helper)
return_tinfo = idaapi.tinfo_t(negative_lvar.parent_tinfo)
return_tinfo.create_ptr(return_tinfo)
new_cexpr_call = idaapi.call_helper(return_tinfo, None,
"CONTAINING_RECORD")
new_cexpr_call.a.push_back(arg_address)
new_cexpr_call.a.push_back(arg_type)
new_cexpr_call.a.push_back(arg_field)
# new_cexpr_call.ea = expression.ea
# new_cexpr_call.x.ea = expression.ea
parent = reversed(self.parents).next().cexpr
if diff:
number = idaapi.make_num(diff)
new_cexpr_add = idaapi.cexpr_t(idaapi.cot_add, new_cexpr_call,
number)
new_cexpr_add.thisown = False
new_cexpr_add.type = return_tinfo
if parent.op == idaapi.cot_ptr:
tmp_tinfo = idaapi.tinfo_t()
tmp_tinfo.create_ptr(parent.type)
new_cexpr_cast = idaapi.cexpr_t(idaapi.cot_cast, new_cexpr_add)
new_cexpr_cast.thisown = False
new_cexpr_cast.type = tmp_tinfo
expression.replace_by(new_cexpr_cast)
else:
expression.replace_by(new_cexpr_add)
else:
if parent.op == idaapi.cot_ptr:
tmp_tinfo = idaapi.tinfo_t()
tmp_tinfo.create_ptr(parent.type)
new_cexpr_cast = idaapi.cexpr_t(idaapi.cot_cast,
new_cexpr_call)
new_cexpr_cast.thisown = False
new_cexpr_cast.type = tmp_tinfo
expression.replace_by(new_cexpr_cast)
else:
expression.replace_by(new_cexpr_call)
def make_call_helper_expr(name, *args, retval=None):
if retval is None:
retval = idaapi.get_unk_type(8)
arglist = idaapi.carglist_t()
for arg in args:
if arg is None:
print("[!] Warning: argument is None, skipping")
continue
if isinstance(arg, idaapi.carg_t):
arglist.push_back(arg)
else:
narg = idaapi.carg_t()
narg.assign(arg)
arglist.push_back(narg)
return idaapi.call_helper(retval, arglist, name)
def create_containing_record(self, expression, index, offset):
negative_lvar = self.negative_lvars[index]
logger.debug("Creating CONTAINING_RECORD macro, offset: {}, negative offset: {}, TYPE: {}".format(
negative_lvar.offset,
offset,
negative_lvar.parent_tinfo.dstr()
))
arg_address = idaapi.carg_t()
if expression.op == idaapi.cot_var:
arg_address.assign(expression)
else:
arg_address.assign(expression.x)
arg_type = idaapi.carg_t()
cexpr_helper = idaapi.create_helper(True, self.pvoid_tinfo, negative_lvar.parent_tinfo.dstr())
arg_type.assign(cexpr_helper)
arg_field = idaapi.carg_t()
cexpr_helper = idaapi.create_helper(
True,
self.pvoid_tinfo,
negative_lvar.member_name
)
arg_field.assign(cexpr_helper)
return_tinfo = idaapi.tinfo_t(negative_lvar.parent_tinfo)
return_tinfo.create_ptr(return_tinfo)
new_cexpr_call = idaapi.call_helper(return_tinfo, None, "CONTAINING_RECORD")
new_cexpr_call.a.push_back(arg_address)
new_cexpr_call.a.push_back(arg_type)
new_cexpr_call.a.push_back(arg_field)
new_cexpr_call.thisown = False
parent = reversed(self.parents).next().cexpr
diff = negative_lvar.offset + offset
if diff:
number = idaapi.make_num(diff)
number.thisown = False
new_cexpr_add = Helper.my_cexpr_t(idaapi.cot_add, x=new_cexpr_call, y=number)
new_cexpr_add.type = return_tinfo
if parent.op == idaapi.cot_ptr:
tmp_tinfo = idaapi.tinfo_t()
tmp_tinfo.create_ptr(parent.type)
new_cexpr_cast = Helper.my_cexpr_t(idaapi.cot_cast, x=new_cexpr_add)
new_cexpr_cast.thisown = False
new_cexpr_cast.type = tmp_tinfo
expression.assign(new_cexpr_cast)
else:
expression.assign(new_cexpr_add)
else:
if parent.op == idaapi.cot_ptr:
tmp_tinfo = idaapi.tinfo_t()
tmp_tinfo.create_ptr(parent.type)
new_cexpr_cast = Helper.my_cexpr_t(idaapi.cot_cast, x=new_cexpr_call)
new_cexpr_cast.thisown = False
new_cexpr_cast.type = tmp_tinfo
expression.assign(new_cexpr_cast)
else:
expression.assign(new_cexpr_call)