yetangitu/ghidra
1
0
Fork 0
mirror of https://github.com/NationalSecurityAgency/ghidra.git synced 2025-10-03 17:59:46 +02:00
Code Issues Releases Wiki Activity
10231 commits 3 branches 48 tags 429 MiB
Commit graph

34 commits

Author SHA1 Message Date
ghidra007
5709ca80d3 GP-3464 Improved gcc rtti script class struct recovery to better use dwarf info, split out parent struct in class struct, fix align issue keeping data from being created correctly, better id and name vftables in multi-inheritance case, clean up of exceptions, start of improved modeling vftables. 2023-08-29 23:07:18 +00:00
Ryan Kurtz
6b2bd61588 Merge remote-tracking branch 'origin/GP-3463_ghidra007_rtti_script_improve_find_internal_vtables--SQUASHED' into patch 2023-06-09 11:14:46 -04:00
ghidra007
0f66077ce2 GP-3463 RecoverClassesFromRTTIScript - improved finding of special vtables to account for ones in memory blocks that do not contain real bytes. 2023-06-09 15:09:00 +00:00
ghidra007
ec8d9f018b GP-3841 rtti script - fixed increment issue caused when fixing 
incrementer
 2023-06-06 22:34:57 +00:00
ghidra007
4c7be8be0d GP-3481 added missing incrementer causing infinite loop in some cases 2023-06-05 17:15:47 +00:00
Ryan Kurtz
ea5b5e4c28 Merge remote-tracking branch 'origin/GP-3481_ghidra007_' into patch 2023-06-01 06:10:12 -04:00
ghidra007
ecade19183 GP-3467 rtti script fixed issue clearing/creating mangled typeinfo-name mangled string of correct length. Was breaking when more than one existing dt in string range because was only clearing first one. 2023-05-31 18:01:55 +00:00
ghidra007
81ba94a3b8 GP-3481 Fixed incorrect checks of getData and getDataContaining in rtti script and replaced api versions with non-api versions and updated checks to work with new way. 2023-05-31 15:54:12 +00:00
ghidra1
0b884e5bd8 Merge remote-tracking branch 'origin/GP-3406_ghidra007_add_mingw_not_fix_check_to_RTTI_script--SQUASHED' into Ghidra_10.3 2023-05-09 13:42:54 -04:00
ghidra007
8aa5ac7c47 GP-3406 RTTI script - added check that mingw analyzer fixed relocations correctly. 2023-05-09 13:41:26 -04:00
ghidra007
8580baddc3 GP-3417 fixed case where si vtable was not getting created bc too many refs. Added secondary check. Added check for same num special vtable and typeinfos. 2023-05-08 21:11:53 +00:00
ghidra007
1d14222f37 GP-2679 Gcc class recovery improvements. Created classes for Vtable, 
Typeinfo, etc. Reworked vtable, const vtable and vtt discovery. Now
works for static gcc and for mingw/cygwin programs.
 2023-04-30 22:02:37 +00:00
ghidra1
552eb9dd61 GP-232 correct use of EXTERNAL block string 2022-12-22 14:38:02 -05:00
ghidra007
d8396e7592 GP-1996 - code refactor to make op new and delete discovery more generic. 2022-05-26 22:12:07 +00:00
ghidra007
5d8574f9f4 GP-1962 Prevent RecoverClassFromRTTIScript from running more than once 
on same program.
 2022-05-18 13:19:33 -04:00
ghidra007
37f87c4874 GP-2010 updated to use preferred root class folder and removed code that 
replaced other class structs
 2022-05-13 22:47:22 +00:00
ghidra007
ba7b5a2dd3 GP-1947 updated class recovery script to handle shifted pointers. 2022-04-29 13:17:50 +00:00
ghidra007
22d4c2069b GP-1581 Recover classes script deleting destructor and clone discovery improvements. 2022-04-14 19:28:49 +00:00
Ryan Kurtz
8315e6a77b Merge remote-tracking branch 'origin/GP-1832_ghidra007_improve_isGcc--SQUASHED' into patch 2022-03-19 01:01:10 -04:00
ghidra007
1ae9218eba GP-1832 improved isGcc checks in RecoverClassesFromRTTI script. 2022-03-18 13:39:41 +00:00
ghidra007
66c8333230 GP-1720 Moved creation of class thiscalls to after removal of non-constructors to remove the small number of incorrect thiscalls created by the RecoverClassesFromRTTI script. 2022-03-16 14:17:14 +00:00
ghidra1
f2706bb1de Merge remote-tracking branch 
'origin/GP-1670_ghidra007_RecoveredClass_ReplaceInStructureBug--SQUASHED'
into patch

Conflicts:
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/RTTIGccClassRecoverer.java
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/RecoveredClassHelper.java
 2022-01-24 17:07:32 -05:00
ghidra007
87d6ff4db3 GP-1670 Fixed bug in a class recovery helper class that in some cases was causing an exception when trying to replace a component in a structure. 2022-01-24 21:34:12 +00:00
ghidra007
19ace220cf GP-1686 updated gcc class recovery to only allow typeinfo structs in non-executable blocks. 2022-01-21 18:15:45 +00:00
ghidra007
9567e2f1ea GP-1506 Refactored to put new class structure code in RecoverClassHelper then added calls to it in gcc create structure code. Plus some code refactoring and cleanup. 2021-12-03 23:06:53 +00:00
ghidra1
659892a810 Merge remote-tracking branch 
'origin/GP-1519_ghirdra007_RecoverClass_replaceGetComponentA--SQUASHED'
into Ghidra_10.1

Conflicts:
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/ExtraScriptUtils.java
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/RTTIGccClassRecoverer.java
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/RTTIWindowsClassRecoverer.java
 2021-11-29 22:35:26 -05:00
ghidra007
2aefe6a15d GP-1519 Changed getComponentAt to getComponentContaining in a breaking EditStructureUtils method and a couple other places. Various refactoring to clean up code. 2021-11-30 01:38:13 +00:00
ghidra007
80538d8c49 GP-1499 Recover classes script various improvements. Updated checks for whether program has DWARF and whether DWARF has been applied so it works for old and new cases. 
Improved error handling. Updated deprecated graph methods which were no longer using defined colors. Various code cleanup.
 2021-11-25 19:02:53 +00:00
ghidra007
0766c30048 GP-1464 RecoverClassesFromRTTIScript now consistently applies its class structures in programs that have PDB information applied. Also, an option was added so users can decide whether to replace existing class data in thiscall functions regardless of whether they originated as PDB or not. 2021-11-10 19:59:21 +00:00
ghidravore
a8da2b761a GP-1073 updating uses of getSymbols(address) to be more efficient where possible 2021-10-06 16:59:58 -04:00
ghidra007
6d5f30f448 GP-1055 Improvements to prototype RecoverClassesFromRTTIScript for stripped gcc binaries including improved finding and creating of virtual tables, some constructor/destructor determination, and improved class data creation. 2021-07-30 18:50:08 -04:00
ghidra007
020df708e2 GP-1044 Fixed promotion of namespaces to only verified classes and added creation of typeinfo structs in stripped gcc binaries 2021-06-16 14:59:01 -04:00
ghidra007
e1953ebb22 GP-972 Improvements to Gcc RTTI Class Recovery 2021-06-10 14:19:33 -04:00
ghidra007
224f15b20a GP-971 Moved ClassRecovery class files to subpackage so they would not appear in script manager window. 2021-05-19 14:24:59 -04:00
Renamed from Ghidra/Features/Decompiler/ghidra_scripts/RTTIGccClassRecoverer.java (Browse further)