/* $Id$ */ /* Copyright (c) 2011 Pierre Pronchery */ /* This file is part of DeforaOS Devel asm */ /* This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, version 3 of the License. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see . */ #include #include #include #include #include #include "Asm.h" /* DEX */ /* private */ /* types */ #pragma pack(1) typedef struct _DexHeader { char magic[4]; char _padding0[4]; uint32_t checksum; unsigned char signature[20]; uint32_t file_size; /* 0x20 */ uint32_t header_size; uint32_t endian_tag; uint32_t link_size; uint32_t link_off; /* 0x30 */ uint32_t map_off; uint32_t string_ids_size; uint32_t string_ids_off; uint32_t type_ids_size; /* 0x40 */ uint32_t type_ids_off; uint32_t proto_ids_size; uint32_t proto_ids_off; uint32_t fields_ids_size; /* 0x50 */ uint32_t fields_ids_off; uint32_t method_ids_size; uint32_t method_ids_off; uint32_t class_defs_size; /* 0x60 */ uint32_t class_defs_off; uint32_t data_size; uint32_t data_off; } DexHeader; enum { TYPE_HEADER_ITEM = 0x0000, TYPE_STRING_ID_ITEM = 0x0001, TYPE_METHOD_ID_ITEM = 0x0005, TYPE_CODE_ITEM = 0x2001, TYPE_STRING_DATA_ITEM = 0x2002 }; typedef struct _DexMapItem { uint16_t type; uint16_t _padding; uint32_t size; uint32_t offset; } DexMapItem; typedef struct _DexMapCodeItem { uint16_t registers_size; uint16_t ins_size; uint16_t outs_size; uint16_t tries_size; uint32_t debug_info_off; uint32_t insns_size; char insns[0]; } DexMapCodeItem; typedef struct _DexMapTryItem { uint32_t start_addr; uint16_t insn_count; uint16_t handler_off; } DexMapTryItem; typedef struct _DexMethodIdItem { uint16_t class_idx; uint16_t proto_idx; uint32_t name_idx; } DexMethodIdItem; typedef struct _DexStringIdItem { uint32_t string_data_off; } DexStringIdItem; #pragma pack() typedef struct _DexString { off_t offset; char * string; } DexString; typedef struct _Dex { DexMethodIdItem * dmii; size_t dmii_cnt; } Dex; /* variables */ static char _dex_signature[4] = "dex\n"; /* prototypes */ /* plug-in */ static int _dex_init(FormatPlugin * format, char const * arch); static int _dex_exit(FormatPlugin * format); static char const * _dex_detect(FormatPlugin * format); static int _dex_decode(FormatPlugin * format, int raw); /* public */ /* variables */ FormatPlugin format_plugin = { NULL, "dex", _dex_signature, sizeof(_dex_signature), _dex_init, _dex_exit, NULL, NULL, _dex_detect, _dex_decode, NULL }; /* private */ /* functions */ /* plug-in */ /* dex_init */ static int _dex_init(FormatPlugin * format, char const * arch) { Dex * dex; #ifdef DEBUG fprintf(stderr, "DEBUG: %s(\"%s\")\n", __func__, arch); #endif if(arch != NULL && strcmp(arch, "dalvik") != 0) return -error_set_code(1, "%s: %s", arch, "Unsupported Dex architecture"); if((dex = object_new(sizeof(*dex))) == NULL) return -1; format->priv = dex; dex->dmii = NULL; dex->dmii_cnt = 0; return 0; } /* dex_exit */ static int _dex_exit(FormatPlugin * format) { Dex * dex = format->priv; free(dex->dmii); object_delete(dex); return 0; } /* dex_detect */ static char const * _dex_detect(FormatPlugin * format) { /* FIXME some sections might contain native code */ return "dalvik"; } /* dex_decode */ static int _decode_map(FormatPlugin * format, DexHeader * dh); static int _decode_map_code(FormatPlugin * format, off_t offset, size_t size); static int _decode_map_method_id(FormatPlugin * format, off_t offset, size_t size); static int _decode_map_string_id(FormatPlugin * format, off_t offset, size_t size); static int _dex_decode(FormatPlugin * format, int raw) { FormatPluginHelper * helper = format->helper; DexHeader dh; if(helper->seek(helper->format, 0, SEEK_SET) != 0) return -1; if(helper->read(helper->format, &dh, sizeof(dh)) != sizeof(dh)) return -1; dh.map_off = _htol32(dh.map_off); if(_decode_map(format, &dh) != 0) return -1; return 0; } static int _decode_map(FormatPlugin * format, DexHeader * dh) { int ret = 0; FormatPluginHelper * helper = format->helper; uint32_t size; uint32_t i; off_t offset; DexMapItem dmi; #ifdef DEBUG fprintf(stderr, "DEBUG: %s()\n", __func__); #endif if(helper->seek(helper->format, dh->map_off, SEEK_SET) != dh->map_off) return -1; if(helper->read(helper->format, &size, sizeof(size)) != sizeof(size)) return -1; size = _htol32(size); #ifdef DEBUG fprintf(stderr, "DEBUG: %s() %u items\n", __func__, size); #endif for(i = 0; i < size; i++) { if(helper->read(helper->format, &dmi, sizeof(dmi)) != sizeof(dmi)) return -1; offset = helper->seek(helper->format, 0, SEEK_CUR); dmi.type = _htol16(dmi.type); dmi.size = _htol32(dmi.size); dmi.offset = _htol32(dmi.offset); #ifdef DEBUG fprintf(stderr, "DEBUG: item %u, type 0x%x, size 0x%x@0x%x\n", i, dmi.type, dmi.size, dmi.offset); #endif switch(dmi.type) { case TYPE_CODE_ITEM: ret |= _decode_map_code(format, dmi.offset, dmi.size); break; case TYPE_METHOD_ID_ITEM: ret |= _decode_map_method_id(format, dmi.offset, dmi.size); break; case TYPE_STRING_ID_ITEM: ret |= _decode_map_string_id(format, dmi.offset, dmi.size); break; } if(helper->seek(helper->format, offset, SEEK_SET) != offset) return -1; if(ret != 0) break; } return ret; } static int _decode_map_code(FormatPlugin * format, off_t offset, size_t size) { FormatPluginHelper * helper = format->helper; DexMapCodeItem dmci; size_t i; off_t seek; size_t j; DexMapTryItem dmti; ssize_t s; if(helper->decode(helper->format, ".text", offset, 0, offset) != 0) return -1; for(i = 0; i < size; i++) { s = sizeof(dmci); if(helper->read(helper->format, &dmci, s) != s) return -1; dmci.registers_size = _htol16(dmci.registers_size); dmci.ins_size = _htol16(dmci.ins_size); dmci.outs_size = _htol16(dmci.outs_size); dmci.tries_size = _htol16(dmci.tries_size); dmci.debug_info_off = _htol32(dmci.debug_info_off); dmci.insns_size = _htol32(dmci.insns_size); seek = helper->seek(helper->format, 0, SEEK_CUR); if(helper->decode(helper->format, NULL, seek, dmci.insns_size * 2, seek) != 0) return -1; /* skip padding and try_items */ seek = (dmci.insns_size & 0x1) == 0x1 ? 2 : 0; #ifdef DEBUG fprintf(stderr, "DEBUG: code item %lu, offset 0x%lx" ", registers 0x%x, size 0x%x, debug @0x%x" ", tries 0x%x, seek 0x%lx\n", i, helper->seek(helper->format, 0, SEEK_CUR), dmci.registers_size, dmci.insns_size * 2, dmci.debug_info_off, dmci.tries_size, seek); #endif if(seek != 0 && helper->seek(helper->format, seek, SEEK_CUR) < 0) return -1; if(dmci.tries_size > 0) { for(j = 0; j < dmci.tries_size; j++) { s = sizeof(dmti); if(helper->read(helper->format, &dmti, s) != s) return -1; dmti.start_addr = _htol32(dmti.start_addr); dmti.insn_count = _htol16(dmti.insn_count); dmti.handler_off = _htol16(dmti.handler_off); } seek = helper->seek(helper->format, 0, SEEK_CUR); if(helper->decode(helper->format, NULL, seek, 8, seek) != 0) return -1; } } return 0; } static int _decode_map_method_id(FormatPlugin * format, off_t offset, size_t size) { FormatPluginHelper * helper = format->helper; Dex * dex = format->priv; ssize_t s; size_t i; AsmString * string; char const * name; if(dex->dmii != NULL) return 0; /* already parsed */ if(helper->seek(helper->format, offset, SEEK_SET) != offset) return -1; s = sizeof(*dex->dmii) * size; if((dex->dmii = malloc(s)) == NULL) return -error_set_code(1, "%s", strerror(errno)); if(helper->read(helper->format, dex->dmii, s) != s) return -1; for(i = 0; i < size; i++) { dex->dmii[i].class_idx = _htol16(dex->dmii[i].class_idx); dex->dmii[i].proto_idx = _htol16(dex->dmii[i].proto_idx); dex->dmii[i].name_idx = _htol32(dex->dmii[i].name_idx); if((string = helper->get_string_by_id(helper->format, dex->dmii[i].name_idx)) != NULL) name = string->name; else /* XXX report error? */ name = NULL; helper->set_function(helper->format, i, name, -1, -1); } dex->dmii_cnt = size; return 0; } static int _decode_map_string_id(FormatPlugin * format, off_t offset, size_t size) { FormatPluginHelper * helper = format->helper; DexStringIdItem * dsii; ssize_t s; size_t i; uint8_t u8; if(helper->seek(helper->format, offset, SEEK_SET) != offset) return -1; s = sizeof(*dsii) * size; if((dsii = malloc(s)) == NULL) return -error_set_code(1, "%s", strerror(errno)); if(helper->read(helper->format, dsii, s) != s) return -1; for(i = 0; i < size; i++) { dsii[i].string_data_off = _htol32(dsii[i].string_data_off); offset = dsii[i].string_data_off; if(helper->seek(helper->format, offset, SEEK_SET) != offset) break; if(helper->read(helper->format, &u8, sizeof(u8)) != sizeof(u8)) break; #ifdef DEBUG fprintf(stderr, "DEBUG: %s() string %lu offset 0x%lx len %u\n", __func__, i, offset, u8); #endif helper->set_string(helper->format, i, NULL, offset + 1, u8); } free(dsii); return (i == size) ? 0 : -1; }