| OLD | NEW |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include <stdint.h> | 5 #include <stdint.h> |
| 6 | 6 |
| 7 #include "courgette/rel32_finder_win32_x86.h" | 7 #include "courgette/rel32_finder_x86.h" |
| 8 | 8 |
| 9 namespace courgette { | 9 namespace courgette { |
| 10 | 10 |
| 11 Rel32FinderWin32X86::Rel32FinderWin32X86(RVA relocs_start_rva, | 11 Rel32FinderX86::Rel32FinderX86(RVA relocs_start_rva, RVA relocs_end_rva) |
| 12 RVA relocs_end_rva) | 12 : Rel32Finder(relocs_start_rva, relocs_end_rva) {} |
| 13 : relocs_start_rva_(relocs_start_rva), relocs_end_rva_(relocs_end_rva) { | |
| 14 } | |
| 15 | 13 |
| 16 Rel32FinderWin32X86::~Rel32FinderWin32X86() { | 14 void Rel32FinderX86::Find(const uint8_t* start_pointer, |
| 17 } | 15 const uint8_t* end_pointer, |
| 18 | 16 RVA start_rva, |
| 19 void Rel32FinderWin32X86::SwapRel32Locations(std::vector<RVA>* dest) { | 17 RVA end_rva, |
| 20 dest->swap(rel32_locations_); | 18 uint32_t size_of_image, |
| 21 } | 19 const std::vector<RVA>& abs32_locations) { |
| 22 | |
| 23 #if COURGETTE_HISTOGRAM_TARGETS | |
| 24 void Rel32FinderWin32X86::SwapRel32TargetRVAs(std::map<RVA, int>* dest) { | |
| 25 dest->swap(rel32_target_rvas_); | |
| 26 } | |
| 27 #endif | |
| 28 | |
| 29 Rel32FinderWin32X86_Basic::Rel32FinderWin32X86_Basic(RVA relocs_start_rva, | |
| 30 RVA relocs_end_rva) | |
| 31 : Rel32FinderWin32X86(relocs_start_rva, relocs_end_rva) { | |
| 32 } | |
| 33 | |
| 34 Rel32FinderWin32X86_Basic::~Rel32FinderWin32X86_Basic() { | |
| 35 } | |
| 36 | |
| 37 void Rel32FinderWin32X86_Basic::Find(const uint8_t* start_pointer, | |
| 38 const uint8_t* end_pointer, | |
| 39 RVA start_rva, | |
| 40 RVA end_rva, | |
| 41 const std::vector<RVA>& abs32_locations) { | |
| 42 // Quick way to convert from Pointer to RVA within a single Section is to | 20 // Quick way to convert from Pointer to RVA within a single Section is to |
| 43 // subtract 'pointer_to_rva'. | 21 // subtract 'pointer_to_rva'. |
| 44 const uint8_t* const adjust_pointer_to_rva = start_pointer - start_rva; | 22 const uint8_t* const adjust_pointer_to_rva = start_pointer - start_rva; |
| 45 | 23 |
| 46 std::vector<RVA>::const_iterator abs32_pos = abs32_locations.begin(); | 24 std::vector<RVA>::const_iterator abs32_pos = abs32_locations.begin(); |
| 47 | 25 |
| 48 // Find the rel32 relocations. | 26 // Find the rel32 relocations. |
| 49 const uint8_t* p = start_pointer; | 27 const uint8_t* p = start_pointer; |
| 50 while (p < end_pointer) { | 28 while (p < end_pointer) { |
| 51 RVA current_rva = static_cast<RVA>(p - adjust_pointer_to_rva); | 29 RVA current_rva = static_cast<RVA>(p - adjust_pointer_to_rva); |
| 52 | 30 |
| 53 // Skip the base reloation table if we encounter it. | 31 // Skip the base reloation table if we encounter it. |
| 54 // Note: We're not bothering to handle the edge case where a Rel32 pointer | 32 // Note: We're not bothering to handle the edge case where a Rel32 pointer |
| 55 // collides with |relocs_start_rva_| by being {1, 2, 3}-bytes before it. | 33 // collides with |relocs_start_rva_| by being {1, 2, 3}-bytes before it. |
| 56 if (current_rva == relocs_start_rva_) { | 34 if (current_rva >= relocs_start_rva_ && current_rva < relocs_end_rva_) { |
| 57 if (relocs_start_rva_ < relocs_end_rva_) { | 35 p += relocs_end_rva_ - current_rva; |
| 58 p += relocs_end_rva_ - relocs_start_rva_; | 36 continue; |
| 59 continue; | |
| 60 } | |
| 61 } | 37 } |
| 62 | 38 |
| 63 // Heuristic discovery of rel32 locations in instruction stream: are the | 39 // Heuristic discovery of rel32 locations in instruction stream: are the |
| 64 // next few bytes the start of an instruction containing a rel32 | 40 // next few bytes the start of an instruction containing a rel32 |
| 65 // addressing mode? | 41 // addressing mode? |
| 66 const uint8_t* rel32 = nullptr; | 42 const uint8_t* rel32 = nullptr; |
| 67 | 43 |
| 68 if (p + 5 <= end_pointer) { | 44 if (p + 5 <= end_pointer) { |
| 69 if (*p == 0xE8 || *p == 0xE9) { // jmp rel32 and call rel32 | 45 if (*p == 0xE8 || *p == 0xE9) { // jmp rel32 and call rel32 |
| 70 rel32 = p + 1; | 46 rel32 = p + 1; |
| 71 } | 47 } |
| 72 } | 48 } |
| 73 if (p + 6 <= end_pointer) { | 49 if (p + 6 <= end_pointer) { |
| 74 if (*p == 0x0F && (*(p+1) & 0xF0) == 0x80) { // Jcc long form | 50 if (*p == 0x0F && (*(p + 1) & 0xF0) == 0x80) { // Jcc long form |
| 75 if (p[1] != 0x8A && p[1] != 0x8B) // JPE/JPO unlikely | 51 if (p[1] != 0x8A && p[1] != 0x8B) // JPE/JPO unlikely |
| 76 rel32 = p + 2; | 52 rel32 = p + 2; |
| 77 } | 53 } |
| 78 } | 54 } |
| 79 if (rel32) { | 55 if (rel32) { |
| 80 RVA rel32_rva = static_cast<RVA>(rel32 - adjust_pointer_to_rva); | 56 RVA rel32_rva = static_cast<RVA>(rel32 - adjust_pointer_to_rva); |
| 81 | 57 |
| 82 // Is there an abs32 reloc overlapping the candidate? | 58 // Is there an abs32 reloc overlapping the candidate? |
| 83 while (abs32_pos != abs32_locations.end() && *abs32_pos < rel32_rva - 3) | 59 while (abs32_pos != abs32_locations.end() && *abs32_pos < rel32_rva - 3) |
| 84 ++abs32_pos; | 60 ++abs32_pos; |
| 85 // Now: (*abs32_pos > rel32_rva - 4) i.e. the lowest addressed 4-byte | 61 // Now: (*abs32_pos > rel32_rva - 4) i.e. the lowest addressed 4-byte |
| (...skipping 18 matching lines...) Expand all Loading... |
| 104 #endif | 80 #endif |
| 105 p = rel32 + 4; | 81 p = rel32 + 4; |
| 106 continue; | 82 continue; |
| 107 } | 83 } |
| 108 } | 84 } |
| 109 p += 1; | 85 p += 1; |
| 110 } | 86 } |
| 111 } | 87 } |
| 112 | 88 |
| 113 } // namespace courgette | 89 } // namespace courgette |
| OLD | NEW |