From 8862696926173104957729683832591438161557 Mon Sep 17 00:00:00 2001 From: Glenn Smith Date: Fri, 27 Dec 2024 16:14:46 -0500 Subject: Render Layers --- plugins/stack_render_layer/plugin.cpp | 124 ++++++++++++++++++++++++++++++++++ 1 file changed, 124 insertions(+) create mode 100644 plugins/stack_render_layer/plugin.cpp (limited to 'plugins/stack_render_layer/plugin.cpp') diff --git a/plugins/stack_render_layer/plugin.cpp b/plugins/stack_render_layer/plugin.cpp new file mode 100644 index 00000000..b32ee470 --- /dev/null +++ b/plugins/stack_render_layer/plugin.cpp @@ -0,0 +1,124 @@ + +#include +#include + +using namespace BinaryNinja; + + +class StackRenderLayer: public RenderLayer +{ +public: + StackRenderLayer(): RenderLayer("Annotate Stack Offset") {} + + void ApplyToLines( + Ref block, + std::vector& lines + ) + { + for (auto& line: lines) + { + // Skip blank lines (block separators) + if (line.tokens.empty()) + { + continue; + } + + // Insert tokens after the address separator + int64_t sep = -1; + for (int64_t i = 0; i < line.tokens.size(); i ++) + { + if (line.tokens[i].type == AddressSeparatorToken) + { + sep = i; + break; + } + } + // Don't annotate lines which don't have an address separator + // (these are usually annotations like { Does not return } + if (sep == -1) + { + continue; + } + + // Grab stack offset value from function + auto stackOffset = block->GetFunction()->GetRegisterValueAtInstruction( + block->GetArchitecture(), + line.addr, + block->GetArchitecture()->GetStackPointerRegister() + ); + auto stackOffsetAfter = block->GetFunction()->GetRegisterValueAfterInstruction( + block->GetArchitecture(), + line.addr, + block->GetArchitecture()->GetStackPointerRegister() + ); + if (stackOffset.state == StackFrameOffset) + { + // Stack pointer is resolved to an offset: show the offset + // (but negative because that is how other tools do it) + line.tokens.emplace( + line.tokens.begin() + sep + 1, + IntegerToken, + fmt::format("{:4x}", -stackOffset.value), + -stackOffset.value + ); + } + else + { + // Stack pointer is not resolved, show ?? + line.tokens.emplace( + line.tokens.begin() + sep + 1, + IntegerToken, + " ??", + 0 + ); + } + // And put a spacer after the offset token + if (stackOffset != stackOffsetAfter) + { + line.tokens.emplace( + line.tokens.begin() + sep + 2, + TextToken, + "* " + ); + } + else + { + line.tokens.emplace( + line.tokens.begin() + sep + 2, + TextToken, + " " + ); + } + } + } + + virtual void ApplyToDisassemblyBlock( + Ref block, + std::vector& lines + ) override + { + // Break this out into a helper so we don't have to write it twice + ApplyToLines(block, lines); + } + + virtual void ApplyToLowLevelILBlock( + Ref block, + std::vector& lines + ) override + { + // Break this out into a helper so we don't have to write it twice + ApplyToLines(block, lines); + } +}; + + +extern "C" { + BN_DECLARE_CORE_ABI_VERSION + + BINARYNINJAPLUGIN bool CorePluginInit() + { + static StackRenderLayer* layer = new StackRenderLayer(); + RenderLayer::Register(layer, DisabledByDefaultRenderLayerDefaultEnableState); + return true; + } +} \ No newline at end of file -- cgit v1.3.1