1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
use crate::{BinaryInfo, Result, demangle};
#[derive(Debug)]
pub struct ElfSymbolProvider {
func_symbols: std::collections::HashMap<u64, String>,
}
impl ElfSymbolProvider {
pub fn new() -> Result<Self> {
Ok(Self {
func_symbols: std::collections::HashMap::new(),
})
}
pub fn update(&mut self, binary_info: &BinaryInfo) -> Result<()> {
if let goblin::Object::Elf(elf) = goblin::Object::parse(binary_info.raw_data)? {
self.parse_oep(&elf)?;
// self.parse_exports(&elf)?;
self.parse_symbols(&elf.syms, &elf.strtab)?;
self.parse_symbols(&elf.dynsyms, &elf.strtab)?;
// for reloc in elf.dynrelas.iter(){
// if reloc.r_sym != 0{
// let address = match reloc.r_type{
// _ => reloc.r_offset
// };
// self.func_symbols.insert(address, elf.strtab.get_at(elf.dynsyms.to_vec()[reloc.r_sym].st_name).unwrap_or("").to_string());
// }
// }
// // for reloc in elf.dynrels.iter(){
// // if reloc.r_sym != 0{
// // let address = match reloc.r_type{
// // _ => reloc.r_offset
// // };
// // self.func_symbols.insert(address, elf.strtab.get_at(elf.dynsyms.to_vec()[reloc.r_sym].st_name).unwrap_or("").to_string());
// // }
// // }
// for reloc in elf.pltrelocs.iter(){
// if reloc.r_sym != 0{
// eprintln!("{}", reloc.r_type);
// let address = match reloc.r_type{
// _ => reloc.r_offset
// };
// self.func_symbols.insert(address, elf.strtab.get_at(elf.dynsyms.to_vec()[reloc.r_sym].st_name).unwrap_or("").to_string());
// }
// }
}
// eprintln!("{:#02x?}", self.func_symbols);
// eprintln!("{}", self.func_symbols.len());
Ok(())
}
fn parse_oep(&mut self, elf: &goblin::elf::Elf) -> Result<()> {
self.func_symbols
.insert(elf.header.e_entry, "original_entry_point".to_string());
Ok(())
}
// fn parse_exports(&mut self, elf: &goblin::elf::Elf) -> Result<()>{
// for function in elf.exported_functions{
// self.func_symbols.insert(function.address, function.name);
// }
// Ok(())
// }
fn parse_symbols(
&mut self,
symbols: &goblin::elf::sym::Symtab,
strtab: &goblin::strtab::Strtab,
) -> Result<()> {
for symbol in symbols {
if symbol.is_function() && symbol.st_value != 0 {
let raw = strtab.get_at(symbol.st_name).unwrap_or("");
// 0.4.2 (N3): demangle Rust-mangled symbols in place. Non-Rust
// names pass through unchanged.
let func_name = demangle::maybe_demangle(raw);
self.func_symbols.insert(symbol.st_value, func_name);
}
}
Ok(())
}
pub fn get_functions_symbols(&self) -> Result<&std::collections::HashMap<u64, String>> {
Ok(&self.func_symbols)
}
}