yetangitu/ghidra
1
0
Fork 0
mirror of https://github.com/NationalSecurityAgency/ghidra.git synced 2025-10-05 10:49:34 +02:00
Code Issues Releases Wiki Activity

GP-4009 Introduced BSim functionality including support for postgresql,

Browse source 
elasticsearch and h2 databases.  Added BSim correlator to Version
Tracking.
This commit is contained in:
caheckman 2023-11-17 01:13:42 +00:00 • committed by ghidra1
parent f0f5b8f2a4
commit 0865a3dfb0
509 changed files with 77125 additions and 934 deletions
Download patch file Download diff file Expand all files Collapse all files

69
Ghidra/Features/BSim/ghidra_scripts/ExampleOverviewQuery.java Executable file
View file

@ -0,0 +1,69 @@
/* ###
* IP: GHIDRA
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
//Example of how to perform an overview query in a script.
//@category BSim
import java.util.HashSet;
import generic.lsh.vector.LSHVectorFactory;
import ghidra.app.script.GhidraScript;
import ghidra.features.bsim.query.facade.SFOverviewInfo;
import ghidra.features.bsim.query.facade.SimilarFunctionQueryService;
import ghidra.features.bsim.query.protocol.ResponseNearestVector;
import ghidra.features.bsim.query.protocol.SimilarityVectorResult;
import ghidra.program.database.symbol.FunctionSymbol;
import ghidra.program.model.listing.*;
public class ExampleOverviewQuery extends GhidraScript {
private static final double SIMILARITY_BOUND = 0.7;
private static final double SIGNIFICANCE_BOUND = 0.0;
@Override
protected void run() throws Exception {
Program queryingProgram = currentProgram;
HashSet<FunctionSymbol> funcsToQuery = new HashSet<>();
FunctionIterator fIter = queryingProgram.getFunctionManager().getFunctionsNoStubs(true);
for (Function func : fIter){
funcsToQuery.add((FunctionSymbol) func.getSymbol());
}
SFOverviewInfo overviewInfo = new SFOverviewInfo(funcsToQuery);
overviewInfo.setSimilarityThreshold(SIMILARITY_BOUND);
overviewInfo.setSignificanceThreshold(SIGNIFICANCE_BOUND);
try (SimilarFunctionQueryService queryService =
new SimilarFunctionQueryService(queryingProgram)) {
String DATABASE_URL = askString("Enter database URL", "URL:");
queryService.initializeDatabase(DATABASE_URL);
LSHVectorFactory vectorFactory = queryService.getLSHVectorFactory();
ResponseNearestVector overviewResults =
queryService.overviewSimilarFunctions(overviewInfo, null, monitor);
StringBuilder buf = new StringBuilder();
buf.append("\n");
for (SimilarityVectorResult result : overviewResults.result) {
buf.append("Name: ").append(result.getBase().getFunctionName()).append("\n");
buf.append("Hit Count: ").append(result.getTotalCount()).append("\n");
buf.append("Self-significance: ");
buf.append(vectorFactory
.getSelfSignificance(result.getBase().getSignatureRecord().getLSHVector()));
buf.append("\n\n");
}
printf("%s\n", buf.toString());
}
}
}