yetangitu/ghidra
1
0
Fork 0
mirror of https://github.com/NationalSecurityAgency/ghidra.git synced 2025-10-03 17:59:46 +02:00
Code Issues Releases Wiki Activity
14905 commits 3 branches 48 tags 429 MiB
Commit graph

39 commits

Author SHA1 Message Date
Ryan Kurtz
2f581d0ead Merge remote-tracking branch 'origin/patch' 2025-03-18 12:17:44 -04:00
ghidra007
39a6a73c6d GP-5487 improved RecoverClassesFromRTTI gcc rtti detection 
(Closes #7904)
 2025-03-18 12:11:34 -04:00
Ян Ли
bfb5553fc0 RecoverClassesFromRTTIScript.java | Fix misspelling of the word 
'analyzer' (Closes #7464)
 2025-02-10 07:08:06 -05:00
ghidra007
8892384b71 GP-5146 fixed rttiUtil issue resulting from previous pdb anon fix. Main fix was to remove incorrect pdb secondary symbols causing rtti script to blow up. Also updated to remove known functions from other class possible const/dest lists. Also updated to remove ticks from pdb rtti instead of just removing the symbols and recreating. This fixed the missing _forParent symbols so also updated script to handle for parent case now that it is getting them. 2024-12-06 15:59:20 +00:00
ghidra007
b04d5335ca GP-4376 Updated gcc class recovery to allow for special typeinfos that 
are not in program memory or external block. Also updated to add a check
for unhandled relocations. Also updated to allow for non-mangled
typeinfo-name strings.
 2024-04-04 16:46:02 +00:00
ghidra1
624a3c4e9e GP-4408 Refactor of FillOutStructureCmd. Added FillOutStructureHelper and additional DecompilerUtils methods. 2024-04-03 09:53:53 -04:00
dev747368
f17ebb78ab GP-2798 initial DWARF5 support 
Adds support for simple DWARF5 debug info.  Split .dwo not supported.

Uses bookmarks to tag problematic issues instead of log messages during import.
 2024-03-11 16:26:06 +00:00
ghidra007
fd8fcebe09 GP-4371 Added check to RecoverClassesFromRTTIScript to not run when there are unhandled relocations. 2024-03-04 18:23:46 +00:00
ghidra007
84705bb8fb GP-3674 updated RTTI script to work in headless mode. 2023-07-31 18:55:59 +00:00
ghidra007
02b4a86df0 GP-0 removed debug lines 2023-05-09 19:34:55 +00:00
ghidra007
8aa5ac7c47 GP-3406 RTTI script - added check that mingw analyzer fixed relocations correctly. 2023-05-09 13:41:26 -04:00
ghidra007
1d14222f37 GP-2679 Gcc class recovery improvements. Created classes for Vtable, 
Typeinfo, etc. Reworked vtable, const vtable and vtt discovery. Now
works for static gcc and for mingw/cygwin programs.
 2023-04-30 22:02:37 +00:00
Ryan Kurtz
687691f5c5 GP-3293: Fixing compilation issue 2023-04-14 15:11:33 -04:00
ghidra007
d8cdcfb068 GP-3293 - Added RTTI Analyzer option to the program information called 'RTTI Found' and use it to determine whether to rerun and also when deciding whether to run the RTTI script. 2023-04-14 18:57:55 +00:00
dragonmacher
2dade60b3e GP-1981 - Theming - Decompiler Module 2022-11-15 14:53:40 -05:00
ghidra007
c4f4208f63 GP-1921 corrected analysisMode usage in recover class script 2022-10-13 14:54:30 +00:00
ghidra007
5d8574f9f4 GP-1962 Prevent RecoverClassFromRTTIScript from running more than once 
on same program.
 2022-05-18 13:19:33 -04:00
ghidra007
37f87c4874 GP-2010 updated to use preferred root class folder and removed code that 
replaced other class structs
 2022-05-13 22:47:22 +00:00
ghidra007
ba7b5a2dd3 GP-1947 updated class recovery script to handle shifted pointers. 2022-04-29 13:17:50 +00:00
ghidra007
1ae9218eba GP-1832 improved isGcc checks in RecoverClassesFromRTTI script. 2022-03-18 13:39:41 +00:00
ghidra1
659892a810 Merge remote-tracking branch 
'origin/GP-1519_ghirdra007_RecoverClass_replaceGetComponentA--SQUASHED'
into Ghidra_10.1

Conflicts:
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/ExtraScriptUtils.java
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/RTTIGccClassRecoverer.java
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/RTTIWindowsClassRecoverer.java
 2021-11-29 22:35:26 -05:00
ghidra007
2aefe6a15d GP-1519 Changed getComponentAt to getComponentContaining in a breaking EditStructureUtils method and a couple other places. Various refactoring to clean up code. 2021-11-30 01:38:13 +00:00
ghidra007
80538d8c49 GP-1499 Recover classes script various improvements. Updated checks for whether program has DWARF and whether DWARF has been applied so it works for old and new cases. 
Improved error handling. Updated deprecated graph methods which were no longer using defined colors. Various code cleanup.
 2021-11-25 19:02:53 +00:00
ghidra1
f22e05af3f Merge remote-tracking branch 
'origin/GP-1315_add_option_to_remove_replaced_class_structures--SQUASHED'
into Ghidra_10.1 (Closes #3443)
 2021-11-10 16:40:22 -05:00
ghidra007
8610e23ae0 GP-1315 Added options to allow removal of replaced class structure data types when replaced with ones created by RecoverClassesFromRTTIScript. 2021-11-10 20:01:05 +00:00
ghidra007
0766c30048 GP-1464 RecoverClassesFromRTTIScript now consistently applies its class structures in programs that have PDB information applied. Also, an option was added so users can decide whether to replace existing class data in thiscall functions regardless of whether they originated as PDB or not. 2021-11-10 19:59:21 +00:00
Ryan Kurtz
69e8119211 Merge remote-tracking branch 'origin/GP-773_ghidravore_graph_visualization_options--SQUASHED' 2021-08-09 14:13:19 -04:00
ghidravore
210cc0bca0 Created the concept of graph types and display options for those graph types. 2021-08-09 13:18:23 -04:00
ghidra007
6d5f30f448 GP-1055 Improvements to prototype RecoverClassesFromRTTIScript for stripped gcc binaries including improved finding and creating of virtual tables, some constructor/destructor determination, and improved class data creation. 2021-07-30 18:50:08 -04:00
ghidra007
4b714c312b Fixed RecoverClass test failures caused by leaving graph flag on. 2021-07-07 16:30:31 +00:00
ghidra1
357500306e Merge remote-tracking branch 'origin/GP-1095_ghidra007_GraphRecoveredClassesImprovements--SQUASHED' into patch 2021-07-06 19:08:22 -04:00
ghidra007
90c517fcf9 GP-1095 Fixed duplicate name graph issues in RecoverClassesFromRTTIScript and GraphClassesScript. Fixed class name parsing flaws in GraphClassesScript. 2021-07-06 18:56:18 -04:00
ghidra1
79b9e9a6ec GP-1101 Improved javadoc for PdbParserConstants and updated script to 
use them
 2021-07-06 15:09:06 -04:00
ghidra007
b8e8c094a1 GP-1101 Added missing isPDBLoaded flag assignment to the RTTIWindowsClassRecoverer which was inadvertently left out during refactoring. 2021-07-06 14:35:02 -04:00
ghidra007
020df708e2 GP-1044 Fixed promotion of namespaces to only verified classes and added creation of typeinfo structs in stripped gcc binaries 2021-06-16 14:59:01 -04:00
ghidra007
e1953ebb22 GP-972 Improvements to Gcc RTTI Class Recovery 2021-06-10 14:19:33 -04:00
ghidra007
b6a5ce659b GP-973 Added ApplyClassFunctionSignatureUpdatesScript and ApplyClassFunctionDefinitionUpdatesScript fix-up scripts for when users update RecoveredClass virtual function signatures or definitions. 2021-06-09 17:08:44 -04:00
ghidra007
224f15b20a GP-971 Moved ClassRecovery class files to subpackage so they would not appear in script manager window. 2021-05-19 14:24:59 -04:00
ghidra007
3d052cde11 GP-339 Added RecoverClassesFromRTTI script and related classes. 2021-05-18 18:53:05 -04:00