mirror of https://github.com/geohot/qira
98 lines
3.1 KiB
Python
98 lines
3.1 KiB
Python
from __future__ import print_function
|
|
from elftools.elf.elffile import ELFFile
|
|
from elftools.elf.sections import SymbolTableSection
|
|
from elftools.elf.relocation import RelocationSection
|
|
from elftools.common.exceptions import ELFError
|
|
import struct
|
|
|
|
def get_arch(fb):
|
|
if fb == 0x28:
|
|
return 'arm'
|
|
elif fb == 0xb7:
|
|
return 'aarch64'
|
|
elif fb == 0x3e:
|
|
return 'x86-64'
|
|
elif fb == 0x03:
|
|
return 'i386'
|
|
elif fb == 0x08:
|
|
return 'mipsel'
|
|
elif fb == 0x1400: # big endian...
|
|
return 'ppc'
|
|
elif fb == 0x800:
|
|
return 'mips'
|
|
|
|
|
|
def load_binary(static):
|
|
try:
|
|
elf = ELFFile(open(static.path, "rb"))
|
|
except ELFError:
|
|
print("*** loader error: non-ELF detected")
|
|
return
|
|
|
|
# TODO: replace with elf['e_machine']
|
|
progdat = open(static.path, "rb").read(0x20)
|
|
fb = struct.unpack("H", progdat[0x12:0x14])[0] # e_machine
|
|
static['arch'] = get_arch(fb)
|
|
static['entry'] = elf['e_entry']
|
|
|
|
ncount = 0
|
|
for segment in elf.iter_segments():
|
|
addr = segment['p_vaddr']
|
|
if segment['p_type'] == 'PT_LOAD':
|
|
memsize = segment['p_memsz']
|
|
static.add_memory_chunk(addr, segment.data().ljust(memsize, b"\x00"))
|
|
|
|
for section in elf.iter_sections():
|
|
if static.debug >= 2:
|
|
print("** found section", section.name, type(section))
|
|
|
|
if isinstance(section, RelocationSection):
|
|
symtable = elf.get_section(section['sh_link'])
|
|
if symtable.is_null():
|
|
continue
|
|
|
|
for rel in section.iter_relocations():
|
|
symbol = symtable.get_symbol(rel['r_info_sym'])
|
|
if static.debug >= 2: #suppress output for testing
|
|
print("Relocation",rel, symbol.name)
|
|
if rel['r_offset'] != 0 and symbol.name != "":
|
|
static[rel['r_offset']]['name'] = "__"+symbol.name
|
|
ncount += 1
|
|
|
|
# hacks for PLT
|
|
# TODO: this is fucking terrible
|
|
if section.name == '.rel.plt' or section.name == '.rela.plt':
|
|
# first symbol is blank
|
|
plt_symbols = []
|
|
for rel in section.iter_relocations():
|
|
symbol = symtable.get_symbol(rel['r_info_sym'])
|
|
plt_symbols.append(symbol.name)
|
|
|
|
# does this change?
|
|
PLT_ENTRY_SIZE = 0x10
|
|
|
|
for section in elf.iter_sections():
|
|
if section.name == ".plt":
|
|
for name, addr in zip(plt_symbols,
|
|
range(section['sh_addr'] + PLT_ENTRY_SIZE,
|
|
section['sh_addr'] + PLT_ENTRY_SIZE + PLT_ENTRY_SIZE*len(plt_symbols),
|
|
PLT_ENTRY_SIZE)):
|
|
static[addr]['name'] = name
|
|
#print plt_symbols, section['sh_addr']
|
|
|
|
|
|
if isinstance(section, SymbolTableSection):
|
|
for nsym, symbol in enumerate(section.iter_symbols()):
|
|
#print symbol['st_info'], symbol.name, hex(symbol['st_value'])
|
|
if symbol['st_value'] != 0 and symbol.name != "" and symbol['st_info']['type'] == "STT_FUNC":
|
|
if static.debug >= 2:
|
|
print("Symbol",hex(symbol['st_value']), symbol.name)
|
|
static[symbol['st_value']]['name'] = symbol.name
|
|
ncount += 1
|
|
|
|
# parse the DynamicSection to get the libraries
|
|
#if isinstance(section, DynamicSection):
|
|
if static.debug >= 1:
|
|
print("** found %d names" % ncount)
|
|
|