yetangitu/ghidra
1
0
Fork 0
mirror of https://github.com/NationalSecurityAgency/ghidra.git synced 2025-10-04 18:29:37 +02:00
Code Issues Releases Wiki Activity

GP-4887 Adjustments to nearestArrayedComponent

Browse source
This commit is contained in:
caheckman 2024-08-30 21:00:14 +00:00
parent 3670d91d80
commit f703538ce1
2 changed files with 26 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

4
Ghidra/Features/Decompiler/src/decompile/cpp/ruleaction.cc
View file

@ -5762,8 +5762,8 @@ bool AddTreeState::hasMatchingSubType(int8 off,uint4 arrayHint,int8 *newoff) con
return true; return true;
} }
uint8 distBefore = offBefore; uint8 distBefore = (offBefore < 0) ? -offBefore : offBefore;
uint8 distAfter = -offAfter; uint8 distAfter = (offAfter < 0) ? -offAfter : offAfter;
if (arrayHint != 1) { if (arrayHint != 1) {
if (elSizeBefore != arrayHint) if (elSizeBefore != arrayHint)
distBefore += 0x1000; distBefore += 0x1000;

33
Ghidra/Features/Decompiler/src/decompile/cpp/type.cc
View file

@ -177,8 +177,8 @@ Datatype *Datatype::getSubType(int8 off,int8 *newoff) const
return (Datatype *)0; return (Datatype *)0;
} }
/// Find the first component data-type after the given offset that is (or contains) /// Find the first component data-type that is (or contains) an array starting after the given
/// an array, and pass back the difference between the component's start and the given offset. /// offset, and pass back the difference between the component's start and the given offset.
/// Return the component data-type or null if no array is found. /// Return the component data-type or null if no array is found.
/// \param off is the given offset into \b this data-type /// \param off is the given offset into \b this data-type
/// \param newoff is used to pass back the offset difference /// \param newoff is used to pass back the offset difference
@ -190,8 +190,8 @@ Datatype *Datatype::nearestArrayedComponentForward(int8 off,int8 *newoff,int8 *e
return (TypeArray *)0; return (TypeArray *)0;
} }
/// Find the first component data-type before the given offset that is (or contains) /// Find the last component data-type that is (or contains) an array starting before the given
/// an array, and pass back the difference between the component's start and the given offset. /// offset, and pass back the difference between the component's start and the given offset.
/// Return the component data-type or null if no array is found. /// Return the component data-type or null if no array is found.
/// \param off is the given offset into \b this data-type /// \param off is the given offset into \b this data-type
/// \param newoff is used to pass back the offset difference /// \param newoff is used to pass back the offset difference
@ -1663,7 +1663,8 @@ int4 TypeStruct::getHoleSize(int4 off) const
Datatype *TypeStruct::nearestArrayedComponentBackward(int8 off,int8 *newoff,int8 *elSize) const Datatype *TypeStruct::nearestArrayedComponentBackward(int8 off,int8 *newoff,int8 *elSize) const
{ {
int4 i = getLowerBoundField(off); int4 firstIndex = getLowerBoundField(off);
int4 i = firstIndex;
while(i >= 0) { while(i >= 0) {
const TypeField &subfield( field[i] ); const TypeField &subfield( field[i] );
int8 diff = off - subfield.offset; int8 diff = off - subfield.offset;
@ -1676,7 +1677,8 @@ Datatype *TypeStruct::nearestArrayedComponentBackward(int8 off,int8 *newoff,int8
} }
else { else {
int8 suboff; int8 suboff;
Datatype *res = subtype->nearestArrayedComponentBackward(subtype->getSize(), &suboff, elSize); int8 remain = (i == firstIndex) ? diff : subtype->getSize() - 1;
Datatype *res = subtype->nearestArrayedComponentBackward(remain, &suboff, elSize);
if (res != (Datatype *)0) { if (res != (Datatype *)0) {
*newoff = diff; *newoff = diff;
return subtype; return subtype;
@ -1691,10 +1693,22 @@ Datatype *TypeStruct::nearestArrayedComponentForward(int8 off,int8 *newoff,int8
{ {
int4 i = getLowerBoundField(off); int4 i = getLowerBoundField(off);
i += 1; int8 remain;
if (i < 0) { // No component starting before off
i += 1; // First component starting after
remain = 0;
}
else {
const TypeField &subfield( field[i] );
remain = off - subfield.offset;
if (remain != 0 && (subfield.type->getMetatype() != TYPE_STRUCT || remain >= subfield.type->getSize())) {
i += 1; // Middle of non-structure that we must go forward from, skip over it
remain = 0;
}
}
while(i<field.size()) { while(i<field.size()) {
const TypeField &subfield( field[i] ); const TypeField &subfield( field[i] );
int8 diff = subfield.offset - off; int8 diff = subfield.offset - off; // The first struct field examined may have a negative diff
if (diff > 128) break; if (diff > 128) break;
Datatype *subtype = subfield.type; Datatype *subtype = subfield.type;
if (subtype->getMetatype() == TYPE_ARRAY) { if (subtype->getMetatype() == TYPE_ARRAY) {
@ -1704,13 +1718,14 @@ Datatype *TypeStruct::nearestArrayedComponentForward(int8 off,int8 *newoff,int8
} }
else { else {
int8 suboff; int8 suboff;
Datatype *res = subtype->nearestArrayedComponentForward(0, &suboff, elSize); Datatype *res = subtype->nearestArrayedComponentForward(remain, &suboff, elSize);
if (res != (Datatype *)0) { if (res != (Datatype *)0) {
*newoff = -diff; *newoff = -diff;
return subtype; return subtype;
} }
} }
i += 1; i += 1;
remain = 0;
} }
return (Datatype *)0; return (Datatype *)0;
} }