package binsec

  1. Overview
  2. Docs
Semantic analysis of binary executables

Install 

dune-project
 Dependency

binsec.github.io Readme Changelog LGPL-2.1-or-later License Edit opam file Versions (19)

Authors

  1. A
    Adel Djoudi
  2. B
    Benjamin Farinier
  3. C
    Chakib Foulani
  4. D
    Dorian Lesbre
  5. F
    Frédéric Recoules
  6. G
    Guillaume Girol
  7. J
    Josselin Feist
  8. L
    Lesly-Ann Daniel
  9. M
    Mahmudul Faisal Al Ameen
  10. M
    Manh-Dung Nguyen
  11. M
    Mathéo Vergnolle
  12. M
    Mathilde Ollivier
  13. M
    Matthieu Lemerre
  14. N
    Nicolas Bellec
  15. O
    Olivier Nicole
  16. R
    Richard Bonichon
  17. R
    Robin David
  18. S
    Sébastien Bardin
  19. S
    Soline Ducousso
  20. T
    Ta Thanh Dinh
  21. Y
    Yaëlle Vinçont
  22. Y
    Yanis Sellami

Maintainers

  1. B
    BINSEC <binsec@saxifrage.saclay.cea.fr>

Sources

binsec-0.11.0.tbz
sha256=4cf70a0367fef6f33ee3165f05255914513ea0539b94ddfef0bd46fc9b42fa8a
sha512=cd67a5b7617f661a7786bef0c828ee55307cef5260dfecbb700a618be795d81b1ac49fc1a18c4904fd2eb8a182dc862b0159093028651e78e7dc743f5babf9e3

doc/binsec_sse_loader/Binsec_sse_loader/Image/index.html

Module Binsec_sse_loader.ImageSource

Sourcetype buffer =
  1. | Zero
  2. | Data of {
    1. offset : int;
    2. len : int;
    3. value : Binsec_kernel.Loader_types.buffer;
    }
Sourceval crop_buffer : lo:Z.t -> hi:Z.t -> buffer -> buffer

crop_buffer ~lo ~hi buf creates a new buffer view containing the buf bytes from lo to hi.

Sourceval content_reader : Binsec_kernel.Virtual_address.t -> Z.t -> ?endianness:Binsec_kernel.Machine.endianness -> buffer Binsec_kernel.Zmap.t -> Binsec_kernel.Virtual_address.t Binsec_kernel.Reader.t

content_reader addr size ~endianness content returns a new Reader of size bytes of content starting from addr.

Sequential accesses are optimized with a cache.

  • raises Not_found

    if the reader tries to access a non-mapped address.

Sourcetype protection =
  1. | R
  2. | RW
  3. | RX
  4. | RWX
Sourcetype symbol = {
  1. base : Binsec_kernel.Virtual_address.t;
  2. name : string;
  3. origin : string;
}
Sourcetype section = {
  1. base : Binsec_kernel.Virtual_address.t;
  2. name : string;
  3. origin : string;
  4. symbols : symbol Binsec_kernel.Zmap.t;
}
Sourcetype t = private {
  1. content : buffer Binsec_kernel.Zmap.t;
    (*

    set of initialized data

    *)
  2. protection : protection Binsec_kernel.Zmap.t;
    (*

    set of mappings

    *)
  3. symbols : (Z.t * string) list Binsec_kernel.Dba.Var.Tag.Attribute.Map.t Binsec_kernel.Basic_types.String.Map.t;
    (*

    set of symbol attributes

    *)
  4. layout : section Binsec_kernel.Zmap.t;
    (*

    reverse memory paving

    *)
}
Sourceval load : fs:(string -> Binsec_kernel.Loader_types.buffer) -> string -> Binsec_kernel.Loader.Img.t -> t

load ~fs filename img builds a process image for the file filename with the content, permission and symbols from the loader image img.

It uses the virtual file system fs to access extra file contents (e.g. for separated debug or coredump).

layout_with_cache image returns two mapping functions. The first one maps an address to a section while the second maps an address to the symbol it belongs.

Sequential accesses are optimized with a cache.

  • raises Not_found

    if the address is not mapped.