mirror of
https://github.com/NationalSecurityAgency/ghidra.git
synced 2025-10-03 17:59:46 +02:00
120 lines
4.3 KiB
Java
120 lines
4.3 KiB
Java
/* ###
|
|
* IP: GHIDRA
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
// Script to apply any changes the user has made to recovered class virtual function definitions
|
|
// edited in the data type manager. To run the script, put the cursor on any member of the
|
|
// desired class in the listing then run the script. For each function definition in the given class
|
|
// that differs from the associated function signature in the listing, the script will update the
|
|
// listing function signatures of any related virtual functions belonging to parent and children
|
|
// classes.
|
|
// Note: The script will not work if the vftable structures were not originally applied to
|
|
// the vftables using the RecoverClassesFromRTTIScript.
|
|
// At some point, the Ghidra API will be updated to do this automatically instead of needing the
|
|
// script to do so. For now, to make it a bit easier, you can use the below listed key binding
|
|
// or menupath if you have the "In Tool" checkbox checked for this script in the script manager.
|
|
//@category C++
|
|
//@menupath Scripts.ApplyClassFunctionDefinitions
|
|
//@keybinding shift D
|
|
|
|
import java.util.ArrayList;
|
|
import java.util.List;
|
|
|
|
import classrecovery.RecoveredClassHelper;
|
|
import ghidra.app.script.GhidraScript;
|
|
import ghidra.program.model.data.FunctionDefinition;
|
|
import ghidra.program.model.data.Structure;
|
|
import ghidra.program.model.listing.Function;
|
|
import ghidra.program.model.symbol.Namespace;
|
|
import ghidra.program.model.symbol.Symbol;
|
|
|
|
public class ApplyClassFunctionDefinitionUpdatesScript extends GhidraScript {
|
|
@Override
|
|
public void run() throws Exception {
|
|
|
|
if (currentProgram == null) {
|
|
println("There is no open program");
|
|
return;
|
|
}
|
|
|
|
RecoveredClassHelper classHelper = new RecoveredClassHelper(currentProgram, currentLocation,
|
|
state.getTool(), this, false, false, false, false, monitor);
|
|
|
|
Namespace classNamespace = classHelper.getClassNamespace(currentAddress);
|
|
if (classNamespace == null) {
|
|
println(
|
|
"Either cannot retrieve class namespace or cursor is not in a member of a class namepace");
|
|
return;
|
|
}
|
|
|
|
List<Symbol> classVftableSymbols = classHelper.getClassVftableSymbols(classNamespace);
|
|
if (classVftableSymbols.isEmpty()) {
|
|
println("There are no vftables in this class");
|
|
return;
|
|
}
|
|
|
|
println(
|
|
"Applying differing function definitions for class " + classNamespace.getName(true));
|
|
|
|
List<FunctionDefinition> classFunctionDefinitions =
|
|
classHelper.getClassFunctionDefinitions(classNamespace);
|
|
if (classFunctionDefinitions.isEmpty()) {
|
|
println("Class " + classNamespace.getName() + " has no function definitions to apply.");
|
|
return;
|
|
}
|
|
List<Object> changedItems = new ArrayList<Object>();
|
|
|
|
for (FunctionDefinition functionDef : classFunctionDefinitions) {
|
|
monitor.checkCanceled();
|
|
|
|
List<Object> newChangedItems = classHelper.applyNewFunctionDefinition(functionDef);
|
|
|
|
changedItems = classHelper.updateList(changedItems, newChangedItems);
|
|
|
|
}
|
|
|
|
if (changedItems == null) {
|
|
println("Class " + classNamespace.getName() + " has no function definitions to apply.");
|
|
return;
|
|
}
|
|
|
|
if (changedItems.isEmpty()) {
|
|
println("No differences found for class " + classNamespace.getName(true) +
|
|
" between its function definition data types and the associated function signatures in the listing.");
|
|
return;
|
|
}
|
|
|
|
List<Structure> structuresOnList = classHelper.getStructuresOnList(changedItems);
|
|
List<Function> functionsOnList = classHelper.getFunctionsOnList(changedItems);
|
|
|
|
if (!structuresOnList.isEmpty()) {
|
|
println();
|
|
println("Updated structures:");
|
|
for (Structure structure : structuresOnList) {
|
|
monitor.checkCanceled();
|
|
println(structure.getPathName());
|
|
}
|
|
}
|
|
|
|
if (!functionsOnList.isEmpty()) {
|
|
println();
|
|
println("Updated functions:");
|
|
for (Function function : functionsOnList) {
|
|
monitor.checkCanceled();
|
|
println(function.getEntryPoint().toString());
|
|
}
|
|
}
|
|
}
|
|
|
|
}
|