yetangitu/ghidra
1
0
Fork 0
mirror of https://github.com/NationalSecurityAgency/ghidra.git synced 2025-10-05 02:39:44 +02:00
Code Issues Releases Wiki Activity
14170 commits 3 branches 48 tags 433 MiB
Commit graph

107 commits

Author SHA1 Message Date
ghidra007
8aa5ac7c47 GP-3406 RTTI script - added check that mingw analyzer fixed relocations correctly. 2023-05-09 13:41:26 -04:00
ghidra007
8580baddc3 GP-3417 fixed case where si vtable was not getting created bc too many refs. Added secondary check. Added check for same num special vtable and typeinfos. 2023-05-08 21:11:53 +00:00
Ryan Kurtz
7fa3389119 GP-2974: Fixing warnings 2023-05-01 07:23:48 -04:00
ghidra007
1d14222f37 GP-2679 Gcc class recovery improvements. Created classes for Vtable, 
Typeinfo, etc. Reworked vtable, const vtable and vtt discovery. Now
works for static gcc and for mingw/cygwin programs.
 2023-04-30 22:02:37 +00:00
ghidra1
19c1e8ae5b GP-3235 improved auto-assignment of VOID storage to void return type for 
function
 2023-04-26 12:19:26 -04:00
ghidra1
2cdaebf0c3 Merge branch 'GP-2308_1633_ghidra1_FunctionDefinitionCallingConventions' 
(Closes #4537, Closes #4898, Closes #3723, Closes #3267)
 2023-04-20 15:41:45 -04:00
ghidra1
a4776892bd GP-1633/GP-2308 Added ProgramArchitecture to datatype managers. 
Refactored ProjectDataTypeManager to extend StandaloneDataTypeManager.
Added actions to datatype tree to allow setting archive architecture.
Added use of storage translators when switching architectures.  Allow
FunctionDefinition to accept arbitrary calling convention
names and many other misc changes.
 2023-04-20 14:01:39 -04:00
ghidra007
d8cdcfb068 GP-3293 - Added RTTI Analyzer option to the program information called 'RTTI Found' and use it to determine whether to rerun and also when deciding whether to run the RTTI script. 2023-04-14 18:57:55 +00:00
ghidra1
552eb9dd61 GP-232 correct use of EXTERNAL block string 2022-12-22 14:38:02 -05:00
ghidra1
d729dd19ca GP-2820 corrected getPossibleCalledDestructors NPE 2022-11-10 13:34:58 -05:00
ghidra007
02db970aee GP-2075 Updated RecoverClassesFromRTTI script to fixup generic deleting destructor names into vector and scalar ones for windows programs and split into two functions when necessary. 2022-06-08 20:22:32 +00:00
ghidra007
d8396e7592 GP-1996 - code refactor to make op new and delete discovery more generic. 2022-05-26 22:12:07 +00:00
ghidra007
5d8574f9f4 GP-1962 Prevent RecoverClassFromRTTIScript from running more than once 
on same program.
 2022-05-18 13:19:33 -04:00
ghidra007
37f87c4874 GP-2010 updated to use preferred root class folder and removed code that 
replaced other class structs
 2022-05-13 22:47:22 +00:00
ghidra007
ba7b5a2dd3 GP-1947 updated class recovery script to handle shifted pointers. 2022-04-29 13:17:50 +00:00
ghidra1
8f0589a6d8 GP-1403 Improved support for auto-named typedefs. Updated create 
typedef action from pointer to use auto-naming.  Replaced old
ImageBaseOffsetDataType 32/64-bit BuiltIn types with new pointer-typedef
based implementations. Improved settings modification
restrictions.  Resolved various bugs.
 2022-04-15 13:12:40 -04:00
ghidra007
22d4c2069b GP-1581 Recover classes script deleting destructor and clone discovery improvements. 2022-04-14 19:28:49 +00:00
dragonmacher
812ea4fe1e GP-1556 - Added support for searching for structure fields by offset 2022-03-25 09:43:50 -04:00
Ryan Kurtz
8315e6a77b Merge remote-tracking branch 'origin/GP-1832_ghidra007_improve_isGcc--SQUASHED' into patch 2022-03-19 01:01:10 -04:00
ghidra007
1ae9218eba GP-1832 improved isGcc checks in RecoverClassesFromRTTI script. 2022-03-18 13:39:41 +00:00
Ryan Kurtz
0f3d24ebcc Merge remote-tracking branch 'origin/GP-1720_ghidra007_Remove_Extraneous_Make_thiscalls--SQUASHED' into patch 2022-03-16 13:02:46 -04:00
ghidra007
66c8333230 GP-1720 Moved creation of class thiscalls to after removal of non-constructors to remove the small number of incorrect thiscalls created by the RecoverClassesFromRTTI script. 2022-03-16 14:17:14 +00:00
ghidra007
387b307402 GP-1781 Fixed two replace in structure bugs in RecoverClassesFromRTTI script. 2022-03-15 14:23:50 +00:00
ghidra1
f2706bb1de Merge remote-tracking branch 
'origin/GP-1670_ghidra007_RecoveredClass_ReplaceInStructureBug--SQUASHED'
into patch

Conflicts:
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/RTTIGccClassRecoverer.java
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/RecoveredClassHelper.java
 2022-01-24 17:07:32 -05:00
ghidra007
87d6ff4db3 GP-1670 Fixed bug in a class recovery helper class that in some cases was causing an exception when trying to replace a component in a structure. 2022-01-24 21:34:12 +00:00
ghidra1
c56961f06b Merge remote-tracking branch 'origin/GP-1601_ghidra007_ApplyClassFunctionDef_fixPureVirtualCase--SQUASHED' into patch 2022-01-24 16:20:29 -05:00
ghidra007
eeee6c1ba4 GP-1601 Fixed the ApplyClassFunctionDefinitionUpdatesScript and the ApplyClassFunctionSignatureUpdatesScript and related methods in RecoveredClassHelper to work with new 10.1 function definition changes. 2022-01-24 21:02:03 +00:00
ghidra007
19ace220cf GP-1686 updated gcc class recovery to only allow typeinfo structs in non-executable blocks. 2022-01-21 18:15:45 +00:00
ghidra1
c0a81f9c8e Merge remote-tracking branch 'origin/GP-1671_ghidra007_RecoveredClass_FixSetLabel_InvalidChars' into patch 2022-01-14 19:19:52 -05:00
ghidra007
34efbc5f1c GP-1671 fixed space typo in createShortenedTemplateNames causing 
symbol.setName stack trace.
 2022-01-12 17:11:43 +00:00
ghidra007
0c1c7d1acf GP-1663 The RecoverClassesForRTTIScript was updated to improve function definition creation for the multi-inheritance and single virtual inheritance cases. 2022-01-11 18:51:06 +00:00
ghidra007
9567e2f1ea GP-1506 Refactored to put new class structure code in RecoverClassHelper then added calls to it in gcc create structure code. Plus some code refactoring and cleanup. 2021-12-03 23:06:53 +00:00
ghidra1
659892a810 Merge remote-tracking branch 
'origin/GP-1519_ghirdra007_RecoverClass_replaceGetComponentA--SQUASHED'
into Ghidra_10.1

Conflicts:
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/ExtraScriptUtils.java
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/RTTIGccClassRecoverer.java
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/RTTIWindowsClassRecoverer.java
 2021-11-29 22:35:26 -05:00
ghidra007
2aefe6a15d GP-1519 Changed getComponentAt to getComponentContaining in a breaking EditStructureUtils method and a couple other places. Various refactoring to clean up code. 2021-11-30 01:38:13 +00:00
ghidra007
80538d8c49 GP-1499 Recover classes script various improvements. Updated checks for whether program has DWARF and whether DWARF has been applied so it works for old and new cases. 
Improved error handling. Updated deprecated graph methods which were no longer using defined colors. Various code cleanup.
 2021-11-25 19:02:53 +00:00
ghidra1
331357f203 Merge remote-tracking branch 
'origin/GP-1495_ghidra007_Add_check_for_error_decompiling_functions--SQUASHED'
into Ghidra_10.1
 2021-11-16 11:58:18 -05:00
ghidra007
e2257ce96a GP-1495 added check for error decompiling function and put bad bookmarks if it happens. 2021-11-16 11:48:08 -05:00
ghidra1
f22e05af3f Merge remote-tracking branch 
'origin/GP-1315_add_option_to_remove_replaced_class_structures--SQUASHED'
into Ghidra_10.1 (Closes #3443)
 2021-11-10 16:40:22 -05:00
ghidra007
8610e23ae0 GP-1315 Added options to allow removal of replaced class structure data types when replaced with ones created by RecoverClassesFromRTTIScript. 2021-11-10 20:01:05 +00:00
ghidra007
0766c30048 GP-1464 RecoverClassesFromRTTIScript now consistently applies its class structures in programs that have PDB information applied. Also, an option was added so users can decide whether to replace existing class data in thiscall functions regardless of whether they originated as PDB or not. 2021-11-10 19:59:21 +00:00
Ryan Kurtz
6792beee6a Merge remote-tracking branch 'origin/GP-1458_ghidra007_label_multi_parent_class_vftables--SQUASHED' 2021-11-09 10:24:58 -05:00
Ryan Kurtz
463f73caf8 Merge remote-tracking branch 
'origin/GP-1311_ghidra007_remove_this_from_func_sigs_make_better_purevirt_sigs--SQUASHED'

(Closes #3417)

Conflicts:
	Ghidra/Features/Decompiler/ghidra_scripts/classrecovery/RecoveredClassUtils.java
 2021-11-09 10:20:52 -05:00
ghidra007
a4349ba443 GP-1311 In RecoverClassesFromRTTIScript support, removed the 'this *' from vfunction definitions to enable generic class assignment and allowed purecall vfunction pointer to be replaced with pointers to correct class vfunction definition. 2021-11-09 15:02:03 +00:00
ghidra007
eb10067c0a GP-1458 Updated RecoverClassesFromRTTI to label multi parent vftables with parent name in Windows programs. 2021-11-09 14:58:34 +00:00
ghidra007
a8e39d58c4 GP-1408 Changed inheriting class structures to contain individual base class structure components instead of whole structures. This allows correct class vftable and vbtable pointers to be used instead of base class ones. This makes structures messier but makes decompiler usage correct. Also updated methods that update virtual functions. 2021-11-09 14:56:19 +00:00
ghidravore
a8da2b761a GP-1073 updating uses of getSymbols(address) to be more efficient where possible 2021-10-06 16:59:58 -04:00
ghidra1
877b168224 GP-943 Corrected RecoverClassesFromRTTIScriptTest4 test failure 2021-09-27 01:22:51 -04:00
ghidra1
27892f659a GP-943 Resurected and revised Structure.getComponentAt method. Also 
revised behavior of Structure.getComponentContaining.  Both will now
ignore zero-length components.
 2021-09-26 19:11:34 -04:00
ghidra1
cfdec26da4 GP-943 Added support for zero-length arrays and 
zero-length components.  NOTE: We still never return 0 for
DataType.getLength().  Added DataType.isZeroLength().
 2021-09-24 16:29:29 -04:00
ghidra007
6d5f30f448 GP-1055 Improvements to prototype RecoverClassesFromRTTIScript for stripped gcc binaries including improved finding and creating of virtual tables, some constructor/destructor determination, and improved class data creation. 2021-07-30 18:50:08 -04:00