crackers 0.9.0

A tool for synthesizing Code Reuse Attacks (ROP chains) using Ghidra's p-code and Z3
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

use jingle::{
    display::JingleDisplayable,
    sleigh::{Disassembly, Instruction, PcodeOperation, SleighArchInfo, context::SleighContext},
};

use crate::{
    config::error::CrackersConfigError,
    reference_program::{ReferenceProgram, step::Step, valuation::MemoryValuation},
};

impl ReferenceProgram {
    pub fn try_load_parsed_pcode(
        sleigh: &SleighContext,
        pcode: &str,
    ) -> Result<Self, CrackersConfigError> {
        let ops = sleigh.parse_pcode_listing(pcode)?;
        let instrs: Vec<Step> = ops
            .into_iter()
            .enumerate()
            .map(|(i, o)| Step::from_instr(op_to_instr(o, sleigh.arch_info(), i as u64)))
            .collect();
        Ok(ReferenceProgram {
            initial_memory: MemoryValuation::default(),
            steps: instrs,
        })
    }
}

fn op_to_instr(op: PcodeOperation, arch_info: &SleighArchInfo, offset: u64) -> Instruction {
    Instruction {
        disassembly: Disassembly {
            mnemonic: format!("{}", op.display(arch_info)),
            args: "".to_string(),
        },
        ops: vec![op],
        length: 1,
        address: offset,
    }
}