diff options
Diffstat (limited to 'element_detection.cc')
-rw-r--r-- | element_detection.cc | 84 |
1 files changed, 84 insertions, 0 deletions
diff --git a/element_detection.cc b/element_detection.cc new file mode 100644 index 0000000..d6bba5f --- /dev/null +++ b/element_detection.cc @@ -0,0 +1,84 @@ +// Copyright 2017 The Chromium Authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. + +#include "components/zucchini/element_detection.h" + +#include <utility> + +#include "base/logging.h" +#include "components/zucchini/disassembler.h" +#include "components/zucchini/disassembler_no_op.h" +#include "components/zucchini/disassembler_win32.h" + +namespace zucchini { + +namespace { + +// Impose a minimal program size to eliminate pathological cases. +constexpr size_t kMinProgramSize = 16; + +} // namespace + +/******** Utility Functions ********/ + +std::unique_ptr<Disassembler> MakeDisassemblerWithoutFallback( + ConstBufferView image) { + if (DisassemblerWin32X86::QuickDetect(image)) { + auto disasm = Disassembler::Make<DisassemblerWin32X86>(image); + if (disasm && disasm->size() >= kMinProgramSize) + return disasm; + } + + if (DisassemblerWin32X64::QuickDetect(image)) { + auto disasm = Disassembler::Make<DisassemblerWin32X64>(image); + if (disasm && disasm->size() >= kMinProgramSize) + return disasm; + } + + return nullptr; +} + +std::unique_ptr<Disassembler> MakeDisassemblerOfType(ConstBufferView image, + ExecutableType exe_type) { + switch (exe_type) { + case kExeTypeWin32X86: + return Disassembler::Make<DisassemblerWin32X86>(image); + case kExeTypeWin32X64: + return Disassembler::Make<DisassemblerWin32X64>(image); + case kExeTypeNoOp: + return Disassembler::Make<DisassemblerNoOp>(image); + default: + return nullptr; + } +} + +base::Optional<Element> DetectElementFromDisassembler(ConstBufferView image) { + std::unique_ptr<Disassembler> disasm = MakeDisassemblerWithoutFallback(image); + if (disasm) + return Element({0, disasm->size()}, disasm->GetExeType()); + return base::nullopt; +} + +/******** ProgramScanner ********/ + +ElementFinder::ElementFinder(ConstBufferView image, ElementDetector&& detector) + : image_(image), detector_(std::move(detector)) {} + +ElementFinder::~ElementFinder() = default; + +base::Optional<Element> ElementFinder::GetNext() { + for (; pos_ < image_.size(); ++pos_) { + ConstBufferView test_image = + ConstBufferView::FromRange(image_.begin() + pos_, image_.end()); + base::Optional<Element> element = detector_.Run(test_image); + if (element) { + element->offset += pos_; + pos_ = element->EndOffset(); + return element; + } + } + return base::nullopt; +} + +} // namespace zucchini |