package binsec

  1. Overview
  2. Docs
Semantic analysis of binary executables

Install 

dune-project
 Dependency

binsec.github.io Readme Changelog LGPL-2.1-or-later License Edit opam file Versions (20)

Authors

  1. A
    Adel Djoudi
  2. B
    Benoit Boero
  3. B
    Benjamin Farinier
  4. C
    Chakib Foulani
  5. D
    Dorian Lesbre
  6. F
    Frédéric Recoules
  7. G
    Guillaume Girol
  8. J
    Josselin Feist
  9. L
    Lesly-Ann Daniel
  10. M
    Mahmudul Faisal Al Ameen
  11. M
    Manh-Dung Nguyen
  12. M
    Mathéo Vergnolle
  13. M
    Matthieu Lemerre
  14. N
    Nicolas Bellec
  15. O
    Olivier Nicole
  16. R
    Richard Bonichon
  17. R
    Robin David
  18. S
    Sébastien Bardin
  19. S
    Soline Ducousso
  20. T
    Ta Thanh Dinh
  21. Y
    Yaëlle Vinçont
  22. Y
    Yanis Sellami

Maintainers

  1. B
    BINSEC <binsec@saxifrage.saclay.cea.fr>

Sources

binsec-0.11.1.tbz
sha256=bb48234a4b60a872015a88282df4873f01dcc984753d49ad2583d49c1ae7d705
sha512=e8aa47a736b83bfd47d5b5e96d0988859b4873ad4a112fee7cd21d02bc72ecec61b7de610a959e38d2f2f5eef8082a2c100c201e5eae5ae3a880c747dce6ae63

doc/binsec_sse_loader/Binsec_sse_loader/Image/index.html

Module Binsec_sse_loader.ImageSource

Sourcetype buffer =
  1. | Zero
  2. | Data of {
    1. offset : int;
    2. len : int;
    3. value : Binsec_kernel.Loader_types.buffer;
    }
Sourceval crop_buffer : lo:Z.t -> hi:Z.t -> buffer -> buffer

crop_buffer ~lo ~hi buf creates a new buffer view containing the buf bytes from lo to hi.

Sourceval content_reader : Binsec_kernel.Virtual_address.t -> Z.t -> ?endianness:Binsec_kernel.Machine.endianness -> buffer Binsec_kernel.Zmap.t -> Binsec_kernel.Virtual_address.t Binsec_kernel.Reader.t

content_reader addr size ~endianness content returns a new Reader of size bytes of content starting from addr.

Sequential accesses are optimized with a cache.

  • raises Not_found

    if the reader tries to access a non-mapped address.

Sourcetype protection =
  1. | R
  2. | RW
  3. | RX
  4. | RWX
Sourcetype symbol = {
  1. base : Binsec_kernel.Virtual_address.t;
  2. name : string;
  3. origin : string;
}
Sourcetype section = {
  1. base : Binsec_kernel.Virtual_address.t;
  2. name : string;
  3. origin : string;
  4. symbols : symbol Binsec_kernel.Zmap.t;
}
Sourcetype t = private {
  1. content : buffer Binsec_kernel.Zmap.t;
    (*

    set of initialized data

    *)
  2. protection : protection Binsec_kernel.Zmap.t;
    (*

    set of mappings

    *)
  3. symbols : (Z.t * string) list Binsec_kernel.Dba.Var.Tag.Attribute.Map.t Binsec_kernel.Basic_types.String.Map.t;
    (*

    set of symbol attributes

    *)
  4. layout : section Binsec_kernel.Zmap.t;
    (*

    reverse memory paving

    *)
}
Sourceval load : fs:(string -> Binsec_kernel.Loader_types.buffer) -> string -> Binsec_kernel.Loader.Img.t -> t

load ~fs filename img builds a process image for the file filename with the content, permission and symbols from the loader image img.

It uses the virtual file system fs to access extra file contents (e.g. for separated debug or coredump).

layout_with_cache image returns two mapping functions. The first one maps an address to a section while the second maps an address to the symbol it belongs.

Sequential accesses are optimized with a cache.

  • raises Not_found

    if the address is not mapped.