def read_case(settings, interps, heaps, pointer, stack, scrutinee):
try:
if settings.opts.verbose:
print("Found case inspection!")
info_name = show.get_name_for_address(settings, pointer.value)
if settings.opts.verbose:
print(" Name:", show.demangle(info_name))
arms, tags, stacks, registers = gather_case_arms(settings, heaps, pointer.value, 1, settings.rt.word.size - 1, stack, {
settings.rt.main_register: ptrutil.make_tagged(settings, Offset(base = CasePointer(inspection = pointer, matched_tag = DefaultTag()), index = 0)),
settings.rt.stack_register: ptrutil.make_tagged(settings, Offset(base = StackPointer(), index = -len(stack)))
}, stack, pointer, [])
interp_arms = []
for arm, tag, stack, regs in zip(arms, tags, stacks, registers):
if settings.opts.verbose:
print()
print("Found case arm:")
print(" From case:", info_name)
print(" Pattern:", tag)
interp_arms.append(read_code(settings, interps, heaps, arm, stack, regs))
return Case(scrutinee = scrutinee, bound_ptr = pointer, arms = interp_arms, tags = tags)
except:
e_type, e_obj, e_tb = sys.exc_info()
print("Error in processing case at", show.show_pretty_pointer(settings, pointer))
print(" Error:", e_obj)
print(" Error Location:", e_tb.tb_lineno)
print(" Disassembly:")
for insn in disasm.disasm_from(settings, pointer.value):
print(" " + show.show_instruction(insn))
print()
def read_case(settings, worklist, heaps, pointer, stack, scrutinee):
try:
if settings.opts.verbose:
print("Found case inspection!")
info_name = show.get_name_for_address(settings, pointer.value)
if settings.opts.verbose:
print(" Name:", show.demangle(info_name))
arms, tags, stacks, registers = gather_case_arms(settings, heaps, pointer.value, 1, settings.rt.word.size - 1, stack, {
settings.rt.main_register: ptrutil.make_tagged(settings, Offset(base = CasePointer(inspection = pointer, matched_tag = DefaultTag()), index = 0)),
settings.rt.stack_register: ptrutil.make_tagged(settings, Offset(base = StackPointer(), index = -len(stack)))
}, stack, pointer, [])
interp_arms = []
for arm, tag, stack, regs in zip(arms, tags, stacks, registers):
if settings.opts.verbose:
print()
print("Found case arm:")
print(" From case:", info_name)
print(" Pattern:", tag)
interp_arms.append(read_code(settings, worklist, heaps, arm, stack, regs))
return Case(scrutinee = scrutinee, bound_ptr = pointer, arms = interp_arms, tags = tags)
except:
e_type, e_obj, e_tb = sys.exc_info()
print("Error in processing case at", show.show_pretty_pointer(settings, pointer))
print(" Error:", e_obj)
print(" Error Location:", e_tb.tb_lineno)
print(" Disassembly:")
for insn in disasm.disasm_from(settings, pointer.value):
print(" " + show.show_instruction(insn))
print()
return UnknownInterpretation()
def read_code(settings, interps, heaps, address, extra_stack, registers):
try:
instructions = disasm.disasm_from(settings, address)
registers[settings.rt.heap_register] = ptrutil.make_tagged(settings, Offset(base = HeapPointer(id = len(heaps), owner = address), index = -1))
registers[settings.rt.stack_register] = ptrutil.make_tagged(settings, Offset(base = StackPointer(), index = -len(extra_stack)))
mach = machine.Machine(settings, heaps, extra_stack, registers)
mach.simulate(instructions)
registers = mach.registers
stack = mach.stack[registers[settings.rt.stack_register].untagged.index+len(mach.stack):]
new_heaps = heaps + [mach.heap]
if settings.opts.verbose:
print(" Heap:", list(map(lambda h: show.show_pretty_value(settings, h), mach.heap)))
print(" Stack:", list(map(lambda s: show.show_pretty_value(settings, s), stack)))
if instructions[-1].operands[0].type == capstone.x86.X86_OP_MEM and machine.base_register(instructions[-1].operands[0].mem.base) == settings.rt.stack_register:
if settings.opts.verbose:
print(" Interpretation: return", show.show_pretty_value(settings, registers[settings.rt.main_register]))
print()
returned = registers[settings.rt.main_register].untagged
interpretation = Pointer(returned)
read_closure(settings, interps, new_heaps, returned)
else:
worklist = []
uses = []
if instructions[-1].operands[0].type == capstone.x86.X86_OP_MEM:
assert machine.base_register(instructions[-1].operands[0].mem.base) == settings.rt.main_register
assert instructions[-1].operands[0].mem.disp == 0
if settings.opts.verbose:
print(" Interpretation: evaluate", show.show_pretty_value(settings, registers[settings.rt.main_register]))
evaled = registers[settings.rt.main_register].untagged
stack_index = 0
interpretation = Pointer(evaled)
worklist.append({'type': 'closure', 'pointer': evaled})
elif instructions[-1].operands[0].type == capstone.x86.X86_OP_IMM:
jmp_address = instructions[-1].operands[0].imm
if jmp_address in settings.address_to_name and settings.address_to_name[jmp_address][:7] == 'stg_ap_':
func = settings.address_to_name[jmp_address]
if func.split('_')[2] == '0':
arg_pattern = ''
else:
arg_pattern = func.split('_')[2]
called = registers[settings.rt.main_register].untagged
worklist.append({'type': 'closure', 'pointer': called})
func_type = 'closure'
else:
arg_pattern = info.read_arg_pattern(settings, jmp_address)
called = StaticValue(value = jmp_address)
worklist.append({'type': 'function/thunk', 'address': jmp_address, 'main-register': registers[settings.rt.main_register], 'arg-pattern': arg_pattern})
func_type = 'info'
num_args = sum(1 for e in filter(lambda pat: pat != 'v', arg_pattern))
if settings.opts.verbose:
print(" Number of non-void args:", num_args)
print(" Called:", show.show_pretty_pointer(settings, called))
print(" Arg pattern:", arg_pattern)
args = []
stack_index = num_args
for reg, i in zip(settings.rt.arg_registers, range(num_args)):
args.append(registers[reg])
stack_index -= 1
args += stack[:stack_index]
if settings.opts.verbose:
print(" Interpretation: call", show.show_pretty_pointer(settings, called), "on", list(map(lambda s: show.show_pretty_value(settings, s), args)))
interpretation = Apply(func_type = func_type, func = Pointer(called), args = interp_args(args, arg_pattern), pattern = arg_pattern)
for arg, pat in zip(args, arg_pattern):
if pat == 'p':
worklist.append({'type': 'closure', 'pointer': arg.untagged})
while stack_index < len(stack):
assert isinstance(stack[stack_index].untagged, StaticValue)
cont_name = show.get_name_for_address(settings, stack[stack_index].untagged.value)
if cont_name[:7] == 'stg_ap_':
assert cont_name[-5:] == '_info'
arg_pattern = cont_name.split('_')[2]
num_extra_args = sum(1 for e in filter(lambda pat: pat != 'v', arg_pattern))
if settings.opts.verbose:
print(" then apply the result to", list(map(lambda s: show.show_pretty_value(settings, s), stack[stack_index+1:][:num_extra_args])))
interpretation = Apply(func_type = 'closure', func = interpretation, args = interp_args(stack[stack_index+1:][:num_extra_args], arg_pattern), pattern = arg_pattern)
for arg in stack[stack_index+1:][:num_extra_args]:
worklist.append({'type': 'closure', 'pointer': arg.untagged})
stack_index += 1 + num_extra_args
elif cont_name == 'stg_upd_frame_info' or cont_name == 'stg_bh_upd_frame_info':
if settings.opts.verbose:
print(" then update the thunk at", show.show_pretty_value(settings, stack[stack_index + 1]))
stack_index += 2
else:
if settings.opts.verbose:
print(" then inspect using", show.show_pretty_value(settings, stack[stack_index]))
print()
interpretation = read_case(settings, interps, new_heaps, stack[stack_index].untagged, stack[stack_index:], interpretation)
stack_index = len(stack)
if settings.opts.verbose:
print()
for work in worklist:
if work['type'] == 'closure':
read_closure(settings, interps, new_heaps, work['pointer'])
elif work['type'] == 'function/thunk':
read_function_thunk(settings, interps, new_heaps, work['address'], work['main-register'], work['arg-pattern'])
else:
assert False,"bad work in worklist"
return interpretation
except:
e_type, e_obj, e_tb = sys.exc_info()
print("Error in processing code at", show.show_pretty_address(settings, address))
print(" Error:", e_obj)
print(" Error Location:", e_tb.tb_lineno)
print(" Disassembly:")
for insn in disasm.disasm_from(settings, address):
print(" " + show.show_instruction(insn))
print()
def read_code(settings, worklist, heaps, address, extra_stack, registers):
try:
instructions = list(disasm.disasm_from(settings, address))
registers[settings.rt.heap_register] = ptrutil.make_tagged(
settings,
Offset(base=HeapPointer(id=len(heaps), owner=address), index=-1))
registers[settings.rt.stack_register] = ptrutil.make_tagged(
settings, Offset(base=StackPointer(), index=-len(extra_stack)))
mach = machine.Machine(settings, heaps, extra_stack, registers)
mach.simulate(instructions)
registers = mach.registers
stack = mach.stack[registers[settings.rt.stack_register].untagged.
index + len(mach.stack):]
new_heaps = heaps + [mach.heap]
if settings.opts.verbose:
print(
" Heap:",
list(
map(lambda h: show.show_pretty_value(settings, h),
mach.heap)))
print(
" Stack:",
list(map(lambda s: show.show_pretty_value(settings, s),
stack)))
if instructions[-1].operands[
0].type == capstone.x86.X86_OP_MEM and machine.base_register(
instructions[-1].operands[0].mem.base
) == settings.rt.stack_register:
if settings.opts.verbose:
print(
" Interpretation: return",
show.show_pretty_value(
settings, registers[settings.rt.main_register]))
returned = registers[settings.rt.main_register].untagged
interpretation = Pointer(returned)
worklist.append(ClosureWork(heaps=new_heaps, pointer=returned))
else:
uses = []
if instructions[-1].operands[0].type == capstone.x86.X86_OP_MEM:
assert machine.base_register(instructions[-1].operands[0].mem.
base) == settings.rt.main_register
assert instructions[-1].operands[0].mem.disp == 0
if settings.opts.verbose:
print(
" Interpretation: evaluate",
show.show_pretty_value(
settings, registers[settings.rt.main_register]))
evaled = registers[settings.rt.main_register].untagged
stack_index = 0
interpretation = Pointer(evaled)
worklist.append(ClosureWork(heaps=new_heaps, pointer=evaled))
elif instructions[-1].operands[0].type == capstone.x86.X86_OP_IMM:
jmp_address = instructions[-1].operands[0].imm
if jmp_address in settings.address_to_name and settings.address_to_name[
jmp_address][:7] == 'stg_ap_':
func = settings.address_to_name[jmp_address]
if func.split('_')[2] == '0':
arg_pattern = ''
else:
arg_pattern = func.split('_')[2]
called = registers[settings.rt.main_register].untagged
worklist.append(
ClosureWork(heaps=new_heaps, pointer=called))
func_type = 'closure'
else:
arg_pattern = info.read_arg_pattern(settings, jmp_address)
called = StaticValue(value=jmp_address)
worklist.append(
FunctionThunkWork(
heaps=new_heaps,
address=jmp_address,
main_register=registers[settings.rt.main_register],
arg_pattern=arg_pattern))
func_type = 'info'
num_args = sum(
1 for e in filter(lambda pat: pat != 'v', arg_pattern))
if settings.opts.verbose:
print(" Number of non-void args:", num_args)
print(" Called:",
show.show_pretty_pointer(settings, called))
print(" Arg pattern:", arg_pattern)
args = []
stack_index = num_args
for reg, i in zip(settings.rt.arg_registers, range(num_args)):
args.append(registers[reg])
stack_index -= 1
args += stack[:stack_index]
if settings.opts.verbose:
print(
" Interpretation: call",
show.show_pretty_pointer(settings, called), "on",
list(
map(lambda s: show.show_pretty_value(settings, s),
args)))
interpretation = Apply(func_type=func_type,
func=Pointer(called),
args=interp_args(args, arg_pattern),
pattern=arg_pattern)
for arg, pat in zip(args, arg_pattern):
if pat == 'p':
worklist.append(
ClosureWork(heaps=new_heaps, pointer=arg.untagged))
while stack_index < len(stack):
assert isinstance(stack[stack_index].untagged, StaticValue)
cont_name = show.get_name_for_address(
settings, stack[stack_index].untagged.value)
if cont_name[:7] == 'stg_ap_':
assert cont_name[-5:] == '_info'
arg_pattern = cont_name.split('_')[2]
num_extra_args = sum(
1 for e in filter(lambda pat: pat != 'v', arg_pattern))
if settings.opts.verbose:
print(
" then apply the result to",
list(
map(
lambda s: show.show_pretty_value(
settings, s),
stack[stack_index + 1:][:num_extra_args])))
interpretation = Apply(func_type='closure',
func=interpretation,
args=interp_args(
stack[stack_index +
1:][:num_extra_args],
arg_pattern),
pattern=arg_pattern)
for arg in stack[stack_index + 1:][:num_extra_args]:
worklist.append(
ClosureWork(heaps=new_heaps, pointer=arg.untagged))
stack_index += 1 + num_extra_args
elif cont_name == 'stg_upd_frame_info' or cont_name == 'stg_bh_upd_frame_info':
if settings.opts.verbose:
print(
" then update the thunk at",
show.show_pretty_value(settings,
stack[stack_index + 1]))
stack_index += 2
else:
if settings.opts.verbose:
print(
" then inspect using",
show.show_pretty_value(settings,
stack[stack_index]))
print()
interpretation = read_case(settings, worklist, new_heaps,
stack[stack_index].untagged,
stack[stack_index:],
interpretation)
stack_index = len(stack)
if settings.opts.verbose:
print()
return interpretation
except:
e_type, e_obj, e_tb = sys.exc_info()
print("Error in processing code at",
show.show_pretty_address(settings, address))
print(" Error:", e_obj)
print(" Error Location:", e_tb.tb_lineno)
print(" Disassembly:")
for insn in disasm.disasm_from(settings, address):
print(" " + show.show_instruction(insn))
print()
return UnknownInterpretation()