package binsec

  1. Overview
  2. Docs
Semantic analysis of binary executables

Install 

dune-project
 Dependency

binsec.github.io Readme Changelog LGPL-2.1-or-later License Edit opam file Versions (22)

Authors

  1. A
    Adel Djoudi
  2. B
    Benoit Boero
  3. B
    Benjamin Farinier
  4. C
    Chakib Foulani
  5. D
    Dorian Lesbre
  6. F
    Frédéric Recoules
  7. G
    Guillaume Girol
  8. J
    Josselin Feist
  9. L
    Lesly-Ann Daniel
  10. M
    Mahmudul Faisal Al Ameen
  11. M
    Manh-Dung Nguyen
  12. M
    Mathéo Vergnolle
  13. M
    Matthieu Lemerre
  14. N
    Nicolas Bellec
  15. O
    Olivier Nicole
  16. R
    Richard Bonichon
  17. R
    Robin David
  18. S
    Sébastien Bardin
  19. S
    Soline Ducousso
  20. T
    Ta Thanh Dinh
  21. Y
    Yaëlle Vinçont
  22. Y
    Yanis Sellami

Maintainers

  1. B
    BINSEC <binsec@saxifrage.saclay.cea.fr>

Sources

binsec-0.11.3.tbz
sha256=93f6fe439d486b166062ef6dd92c4ce3aa0947b5e18b1c3aa7de2fc3003aa6d9
sha512=98feb2b0a3f0a33fe912e9885311dd1c051768c707437f8ef038a8489fec019960142b588c6973eb8f726a14d9b2a1b4c765d915539911cb9f6ed6da9f1e51f2

doc/binsec_sse_loader/Binsec_sse_loader/Image/index.html

Module Binsec_sse_loader.ImageSource

Sourcetype buffer =
  1. | Zero
  2. | Data of {
    1. offset : int;
    2. len : int;
    3. value : Binsec_kernel.Loader_types.buffer;
    }
Sourceval crop_buffer : lo:Z.t -> hi:Z.t -> buffer -> buffer

crop_buffer ~lo ~hi buf creates a new buffer view containing the buf bytes from lo to hi.

Sourceval content_reader : Binsec_kernel.Virtual_address.t -> Z.t -> ?endianness:Binsec_kernel.Machine.endianness -> buffer Binsec_kernel.Zmap.t -> Binsec_kernel.Virtual_address.t Binsec_kernel.Reader.t

content_reader addr size ~endianness content returns a new Reader of size bytes of content starting from addr.

Sequential accesses are optimized with a cache.

  • raises Not_found

    if the reader tries to access a non-mapped address.

Sourcetype protection =
  1. | R
  2. | RW
  3. | RX
  4. | RWX
Sourcetype symbol = {
  1. base : Binsec_kernel.Virtual_address.t;
  2. name : string;
  3. origin : string;
}
Sourcetype section = {
  1. base : Binsec_kernel.Virtual_address.t;
  2. name : string;
  3. origin : string;
  4. symbols : symbol Binsec_kernel.Zmap.t;
}
Sourcetype t = private {
  1. content : buffer Binsec_kernel.Zmap.t;
    (*

    set of initialized data

    *)
  2. protection : protection Binsec_kernel.Zmap.t;
    (*

    set of mappings

    *)
  3. symbols : (Z.t * string) list Binsec_kernel.Dba.Var.Tag.Attribute.Map.t Binsec_kernel.Basic_types.String.Map.t;
    (*

    set of symbol attributes

    *)
  4. layout : section Binsec_kernel.Zmap.t;
    (*

    reverse memory paving

    *)
}
Sourceval load : fs:(string -> Binsec_kernel.Loader_types.buffer) -> string -> Binsec_kernel.Loader.Img.t -> t

load ~fs filename img builds a process image for the file filename with the content, permission and symbols from the loader image img.

It uses the virtual file system fs to access extra file contents (e.g. for separated debug or coredump).

layout_with_cache image returns two mapping functions. The first one maps an address to a section while the second maps an address to the symbol it belongs.

Sequential accesses are optimized with a cache.

  • raises Not_found

    if the address is not mapped.