From 5147249a644f611a801aada7645b7a993fc8e314 Mon Sep 17 00:00:00 2001 From: Brandon Miller Date: Thu, 8 May 2025 15:08:10 -0400 Subject: Implement EFI resolver as a module workflow --- platform/efi/efi_resolver/include/DxeResolver.h | 26 -------- platform/efi/efi_resolver/include/GuidRenderer.h | 21 ------ platform/efi/efi_resolver/include/ModuleType.h | 23 ------- platform/efi/efi_resolver/include/PeiResolver.h | 21 ------ platform/efi/efi_resolver/include/Resolver.h | 75 ---------------------- .../efi/efi_resolver/include/TypePropagation.h | 18 ------ platform/efi/efi_resolver/include/Utils.h | 40 ------------ 7 files changed, 224 deletions(-) delete mode 100644 platform/efi/efi_resolver/include/DxeResolver.h delete mode 100644 platform/efi/efi_resolver/include/GuidRenderer.h delete mode 100644 platform/efi/efi_resolver/include/ModuleType.h delete mode 100644 platform/efi/efi_resolver/include/PeiResolver.h delete mode 100644 platform/efi/efi_resolver/include/Resolver.h delete mode 100644 platform/efi/efi_resolver/include/TypePropagation.h delete mode 100644 platform/efi/efi_resolver/include/Utils.h (limited to 'platform/efi/efi_resolver/include') diff --git a/platform/efi/efi_resolver/include/DxeResolver.h b/platform/efi/efi_resolver/include/DxeResolver.h deleted file mode 100644 index eef6e6c2..00000000 --- a/platform/efi/efi_resolver/include/DxeResolver.h +++ /dev/null @@ -1,26 +0,0 @@ -#pragma once - -#include "Resolver.h" - -class DxeResolver : Resolver -{ - bool resolveBootServices(); - bool resolveRuntimeServices(); - - bool resolveSmmTables(string serviceName, string tableName); - bool resolveSmmServices(); - bool resolveSmiHandlers(); - -public: - /*! - resolve BootServices and RuntimeServices, define protocol types that loaded by BootServices - */ - bool resolveDxe(); - - /*! - Define MMST/SMMST and resolve SMM related protocols - */ - bool resolveSmm(); - - DxeResolver(Ref view, Ref task); -}; \ No newline at end of file diff --git a/platform/efi/efi_resolver/include/GuidRenderer.h b/platform/efi/efi_resolver/include/GuidRenderer.h deleted file mode 100644 index 9e5a43bc..00000000 --- a/platform/efi/efi_resolver/include/GuidRenderer.h +++ /dev/null @@ -1,21 +0,0 @@ -#pragma once - -#include "binaryninjaapi.h" -#include - -using namespace BinaryNinja; -using namespace std; - -class EfiGuidRenderer : public BinaryNinja::DataRenderer -{ - EfiGuidRenderer() = default; - -public: - bool IsValidForData(BinaryView*, uint64_t address, Type*, vector>&) override; - - vector GetLinesForData( - BinaryView*, uint64_t address, Type*, const vector& prefix, size_t width, - std::vector>& context, const std::string& language = std::string()) override; - - static void Register(); -}; diff --git a/platform/efi/efi_resolver/include/ModuleType.h b/platform/efi/efi_resolver/include/ModuleType.h deleted file mode 100644 index 187dcc36..00000000 --- a/platform/efi/efi_resolver/include/ModuleType.h +++ /dev/null @@ -1,23 +0,0 @@ -#pragma once - -#include "binaryninjaapi.h" - -using namespace BinaryNinja; - -enum EFIModuleType -{ - UNKNOWN, - PEI, - DXE, -}; - -static inline EFIModuleType identifyModuleType(BinaryView* bv) -{ - std::string viewType = bv->GetCurrentView(); - if (viewType == "Linear:PE") - return DXE; - else if (viewType == "Linear:TE") - return PEI; - else - return UNKNOWN; -} \ No newline at end of file diff --git a/platform/efi/efi_resolver/include/PeiResolver.h b/platform/efi/efi_resolver/include/PeiResolver.h deleted file mode 100644 index 2ecf8ace..00000000 --- a/platform/efi/efi_resolver/include/PeiResolver.h +++ /dev/null @@ -1,21 +0,0 @@ -#pragma once - -#include "Resolver.h" - -class PeiResolver : Resolver -{ - bool resolvePeiIdt(); - bool resolvePeiMrc(); - bool resolvePeiMrs(); - bool resolvePlatformPointers(); - bool resolvePeiDescriptors(); - bool resolvePeiServices(); - -public: - /*! - resolve Pei related types and PPIs, this function will also resolve processor-specific pointers - and tried to define the EFI_PEI_DESCRIPTORS - */ - bool resolvePei(); - PeiResolver(Ref view, Ref task); -}; \ No newline at end of file diff --git a/platform/efi/efi_resolver/include/Resolver.h b/platform/efi/efi_resolver/include/Resolver.h deleted file mode 100644 index 91bb1862..00000000 --- a/platform/efi/efi_resolver/include/Resolver.h +++ /dev/null @@ -1,75 +0,0 @@ -#pragma once - -#include -#include - -#include "GuidRenderer.h" -#include "ModuleType.h" -#include "TypePropagation.h" -#include "binaryninjaapi.h" -#include "highlevelilinstruction.h" -#include "lowlevelilinstruction.h" -#include "mediumlevelilinstruction.h" - -using namespace BinaryNinja; -using namespace std; - -typedef array EFI_GUID; - -class Resolver -{ -protected: - Ref m_view; - Ref m_task; - size_t m_width; - map> m_protocol; - map m_user_guids; - - vector> m_service_usages; - vector> m_protocol_usages; - vector> m_guid_usages; - vector> m_variable_usages; - - bool parseUserGuidIfExists(const string& filePath); - bool parseProtocolMapping(const string& filePath); - - /*! - For backward compatibility, if a user saved a bndb with older version Binary Ninja - this function will try to retrieve types from Platform Types if it doesn't find one - in BinaryView - */ - Ref GetTypeFromViewAndPlatform(string type_name); - void initProtocolMapping(); - -public: - bool setModuleEntry(EFIModuleType fileType); - bool resolveGuidInterface(Ref func, uint64_t addr, int guid_pos, int interface_pos); - Resolver(Ref view, Ref task); - - pair lookupGuid(EFI_GUID guidBytes); - pair defineAndLookupGuid(uint64_t addr); - - string nonConflictingName(const string& basename); - static string nonConflictingLocalName(Ref func, const string& basename); - - /*! - Define the structure used at the callsite with type `typeName`, propagate it to the data section. If it's a - structure type, define it fields according to the `followFields` parameter. The input `addr` should be a call - instruction \param func the function that contains the callsite (it's parent function) \param addr address of the - callsite \param typeName the type that need to define \param paramIdx the parameter index that want to define \param - followFields whether to define the structure's fields if they are pointers \return False if failed - - \b Example: - \code{.cpp} - refs = bv->GetCodeReferencesForType(QualifiedName("EFI_GET_VARIABLE")); - for (auto ref : refs) - { - // ... some checking, need to make sure is a call instruction - bool ok = defineTypeAtCallsite(ref.func, ref.addr, "EFI_GUID", 2, false); - } - \endcode - */ - bool defineTypeAtCallsite( - Ref func, uint64_t addr, string typeName, int paramIdx, bool followFields = false); - vector HighLevelILExprsAt(Ref func, Ref arch, uint64_t addr); -}; \ No newline at end of file diff --git a/platform/efi/efi_resolver/include/TypePropagation.h b/platform/efi/efi_resolver/include/TypePropagation.h deleted file mode 100644 index 1985e2ab..00000000 --- a/platform/efi/efi_resolver/include/TypePropagation.h +++ /dev/null @@ -1,18 +0,0 @@ -#pragma once - -#include "Utils.h" -#include "binaryninjaapi.h" - -using namespace BinaryNinja; - -class TypePropagation -{ - Ref m_view; - std::deque m_queue; - Ref m_platform; - -public: - TypePropagation(BinaryView* view); - bool propagateFuncParamTypes(Function* func); - bool propagateFuncParamTypes(Function* func, SSAVariable ssa_var); -}; \ No newline at end of file diff --git a/platform/efi/efi_resolver/include/Utils.h b/platform/efi/efi_resolver/include/Utils.h deleted file mode 100644 index 981908b2..00000000 --- a/platform/efi/efi_resolver/include/Utils.h +++ /dev/null @@ -1,40 +0,0 @@ -#pragma once - -#include "binaryninjaapi.h" - -using namespace BinaryNinja; - -static inline std::string GetOriginalTypeName(Ref type) -{ - std::string result; - if (type->IsPointer()) - { - if (type->GetChildType().GetValue()->IsNamedTypeRefer()) - { - return type->GetChildType().GetValue()->GetNamedTypeReference()->GetName().GetString(); - } - return type->GetTypeName().GetString(); - } - if (type->IsNamedTypeRefer()) - return type->GetNamedTypeReference()->GetName().GetString(); - - return type->GetTypeName().GetString(); -} - -static inline std::string GetVarNameForTypeStr(const std::string typeStr) -{ - std::istringstream iss(typeStr); - std::string word; - std::string result; - - while (std::getline(iss, word, '_')) - { - if (!word.empty()) - { - word[0] = std::toupper(word[0]); - std::transform(word.begin() + 1, word.end(), word.begin() + 1, ::tolower); - result += word; - } - } - return result; -} -- cgit v1.3.1