types

Documentation

Index

• type Addr
  • func (a Addr) MarshalJSON() ([]byte, error)
  • func (a Addr) MarshalText() ([]byte, error)
  • func (a Addr) String() string
  • func (a *Addr) UnmarshalJSON(b []byte) error
  • func (a *Addr) UnmarshalText(b []byte) error
• type BinaryRegexp
  • func MustCompile(expr string) *BinaryRegexp
  • func (b *BinaryRegexp) FindBytesMatchStartingAt(bytes []byte, startAt int) (*binexp.Match, error)
  • func (b *BinaryRegexp) FindNextMatch(m *binexp.Match) (*binexp.Match, error)
  • func (b *BinaryRegexp) FindNextOverlappingMatch(m *binexp.Match) (*binexp.Match, error)
  • func (b *BinaryRegexp) String() string
• type EntropyQualityIndex
• type Fingerprint
  • func FingerprintFromGadgets(gadgetInstances []*GadgetInstance) (Fingerprint, error)
  • func (f1 Fingerprint) CompareTo(f2 Fingerprint, includeSurvived bool) FingerprintComparison
• type FingerprintComparison
• type Gadget
  • func (g Gadget) Bytes() []byte
  • func (g Gadget) InstructionString() string
  • func (g Gadget) Len() int
• type GadgetDecoderFunc
• type GadgetId
• type GadgetInstance
  • func (gi *GadgetInstance) String() string
• type GadgetInstances
  • func (gis GadgetInstances) SortAlphabetically()
  • func (gis GadgetInstances) SortByAddress()
  • func (gis GadgetInstances) SortByLength()
  • func (gis GadgetInstances) String() string
• type GadgetSpec
• type Instruction
  • func (i *Instruction) String() string
• type InstructionDecoderFunc
• type InstructionInstance
  • func MakeInstructionInstance(instruction *Instruction, address Addr) *InstructionInstance
• type Library
• type Octets
  • func (o Octets) MarshalJSON() ([]byte, error)
  • func (o Octets) String() string
  • func (o *Octets) UnmarshalJSON(b []byte) error
• type Offset
  • func (o Offset) MarshalJSON() ([]byte, error)
  • func (o Offset) MarshalText() ([]byte, error)
  • func (o Offset) String() string
  • func (o *Offset) UnmarshalJSON(b []byte) error
  • func (o *Offset) UnmarshalText(b []byte) error
• type Process
• type RegionsResult

Types

type Addr

type Addr uint64

func (Addr) MarshalJSON

func (a Addr) MarshalJSON() ([]byte, error)

func (Addr) MarshalText

func (a Addr) MarshalText() ([]byte, error)

func (Addr) String

func (a Addr) String() string

func (*Addr) UnmarshalJSON

func (a *Addr) UnmarshalJSON(b []byte) error

func (*Addr) UnmarshalText

func (a *Addr) UnmarshalText(b []byte) error

type BinaryRegexp

type BinaryRegexp struct {
	// contains filtered or unexported fields
}

func MustCompile

func MustCompile(expr string) *BinaryRegexp

func (*BinaryRegexp) FindBytesMatchStartingAt

func (b *BinaryRegexp) FindBytesMatchStartingAt(bytes []byte, startAt int) (*binexp.Match, error)

func (*BinaryRegexp) FindNextMatch

func (b *BinaryRegexp) FindNextMatch(m *binexp.Match) (*binexp.Match, error)

func (*BinaryRegexp) FindNextOverlappingMatch

func (b *BinaryRegexp) FindNextOverlappingMatch(m *binexp.Match) (*binexp.Match, error)

func (*BinaryRegexp) String

func (b *BinaryRegexp) String() string

type EntropyQualityIndex

type EntropyQualityIndex float64

type Fingerprint

type Fingerprint map[GadgetId][]Addr

func FingerprintFromGadgets

func FingerprintFromGadgets(gadgetInstances []*GadgetInstance) (Fingerprint, error)

func (Fingerprint) CompareTo

func (f1 Fingerprint) CompareTo(f2 Fingerprint, includeSurvived bool) FingerprintComparison

type FingerprintComparison

type FingerprintComparison struct {
	Survived            int                            `json:"survived"`
	Moved               int                            `json:"moved"`
	Dead                int                            `json:"dead"`
	GadgetsByOffset     map[Offset]int                 `json:"gadgetCountsByOffset"`
	GadgetDisplacements map[Addr]map[GadgetId][]Offset `json:"gadgetDisplacements"`
	NewGadgets          map[GadgetId][]Addr            `json:"newGadgets"`
}

type Gadget

type Gadget []*Instruction

func (Gadget) Bytes

func (g Gadget) Bytes() []byte

func (Gadget) InstructionString

func (g Gadget) InstructionString() string

func (Gadget) Len

func (g Gadget) Len() int

type GadgetDecoderFunc

type GadgetDecoderFunc func([]byte) (Gadget, error)

type GadgetId

type GadgetId string

type GadgetInstance

type GadgetInstance struct {
	Address Addr   `json:"address"`
	Gadget  Gadget `json:"gadget"`
}

func (*GadgetInstance) String

func (gi *GadgetInstance) String() string

type GadgetInstances

type GadgetInstances []*GadgetInstance

func (GadgetInstances) SortAlphabetically

func (gis GadgetInstances) SortAlphabetically()

func (GadgetInstances) SortByAddress

func (gis GadgetInstances) SortByAddress()

func (GadgetInstances) SortByLength

func (gis GadgetInstances) SortByLength()

func (GadgetInstances) String

func (gis GadgetInstances) String() string

type GadgetSpec

type GadgetSpec struct {
	Opcode *BinaryRegexp
	Size   int
	Align  Addr
}

Specifies the termination conditions for a gadget A gadget is typically <Some instruction set> + <some termination condition> A termination is a control-flow change

type Instruction

type Instruction struct {
	Octets Octets `json:"octets"`
	DisAsm string `json:"disasm"`
}

func (*Instruction) String

func (i *Instruction) String() string

type InstructionDecoderFunc

type InstructionDecoderFunc func([]byte) (*Instruction, error)

type InstructionInstance

type InstructionInstance struct {
	Address Addr   `json:"address"`
	Octets  Octets `json:"octets"`
	DisAsm  string `json:"disasm"`
}

func MakeInstructionInstance

func MakeInstructionInstance(instruction *Instruction, address Addr) *InstructionInstance

type Library

type Library struct {
	Path            string `json:"path"`
	PolyverseTained bool   `json:"polyverseTainted"`
}

type Octets

type Octets []byte

func (Octets) MarshalJSON

func (o Octets) MarshalJSON() ([]byte, error)

func (Octets) String

func (o Octets) String() string

func (*Octets) UnmarshalJSON

func (o *Octets) UnmarshalJSON(b []byte) error

type Offset

type Offset int64

func (Offset) MarshalJSON

func (o Offset) MarshalJSON() ([]byte, error)

func (Offset) MarshalText

func (o Offset) MarshalText() ([]byte, error)

func (Offset) String

func (o Offset) String() string

func (*Offset) UnmarshalJSON

func (o *Offset) UnmarshalJSON(b []byte) error

func (*Offset) UnmarshalText

func (o *Offset) UnmarshalText(b []byte) error

type Process

type Process struct {
	Info      *process.ProcessInfo `json:"info"`
	Libraries []Library            `json:"libraries"`
}

type RegionsResult

type RegionsResult struct {
	Span    *memaccess.MemoryRegion  `json:"span"`
	Size    uint                     `json:"size"`
	Regions []memaccess.MemoryRegion `json:"regions"`
}