2009-08-20 16:23:43 +03:00
|
|
|
/*
|
|
|
|
|
* ClamAV bytecode internal API
|
|
|
|
|
*
|
|
|
|
|
* Copyright (C) 2009 Sourcefire, Inc.
|
|
|
|
|
*
|
2009-09-04 16:24:52 +03:00
|
|
|
* Authors: Török Edvin
|
|
|
|
|
*
|
2009-08-20 16:23:43 +03:00
|
|
|
* This program is free software; you can redistribute it and/or modify
|
|
|
|
|
* it under the terms of the GNU General Public License version 2 as
|
|
|
|
|
* published by the Free Software Foundation.
|
|
|
|
|
*
|
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
|
*
|
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
|
* along with this program; if not, write to the Free Software
|
|
|
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
|
|
|
|
|
* MA 02110-1301, USA.
|
|
|
|
|
*/
|
|
|
|
|
|
2009-09-07 18:01:43 +03:00
|
|
|
#define _XOPEN_SOURCE 600
|
|
|
|
|
#include <unistd.h>
|
2009-09-04 17:29:13 +03:00
|
|
|
#include <stdlib.h>
|
2009-12-02 17:13:07 +02:00
|
|
|
#include <fcntl.h>
|
|
|
|
|
#include <errno.h>
|
2009-08-20 16:23:43 +03:00
|
|
|
#include "cltypes.h"
|
2009-09-04 17:29:13 +03:00
|
|
|
#include "clambc.h"
|
|
|
|
|
#include "bytecode_priv.h"
|
2009-08-20 16:23:43 +03:00
|
|
|
#include "type_desc.h"
|
|
|
|
|
#include "bytecode_api.h"
|
2009-09-04 16:24:52 +03:00
|
|
|
#include "bytecode_api_impl.h"
|
2009-09-11 15:12:17 +03:00
|
|
|
#include "others.h"
|
2009-08-20 16:23:43 +03:00
|
|
|
|
2009-09-04 16:24:52 +03:00
|
|
|
uint32_t cli_bcapi_test0(struct cli_bc_ctx *ctx, struct foo* s, uint32_t u)
|
2009-08-20 16:23:43 +03:00
|
|
|
{
|
|
|
|
|
return (s && s->nxt == s && u == 0xdeadbeef) ? 0x12345678 : 0x55;
|
|
|
|
|
}
|
|
|
|
|
|
2009-09-04 16:24:52 +03:00
|
|
|
uint32_t cli_bcapi_test1(struct cli_bc_ctx *ctx, uint32_t a, uint32_t b)
|
2009-08-20 16:23:43 +03:00
|
|
|
{
|
|
|
|
|
return (a==0xf00dbeef && b==0xbeeff00d) ? 0x12345678 : 0x55;
|
|
|
|
|
}
|
2009-09-04 17:29:13 +03:00
|
|
|
|
|
|
|
|
int32_t cli_bcapi_read(struct cli_bc_ctx* ctx, uint8_t *data, int32_t size)
|
|
|
|
|
{
|
2009-12-03 11:37:38 +02:00
|
|
|
if (!ctx->fmap)
|
2009-09-04 17:29:13 +03:00
|
|
|
return -1;
|
2009-12-03 11:37:38 +02:00
|
|
|
return fmap_readn(ctx->fmap, data, ctx->off, size);
|
2009-09-04 17:29:13 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
int32_t cli_bcapi_seek(struct cli_bc_ctx* ctx, int32_t pos, uint32_t whence)
|
|
|
|
|
{
|
|
|
|
|
off_t off;
|
2009-12-03 11:37:38 +02:00
|
|
|
if (!ctx->fmap)
|
2009-09-08 22:25:33 +03:00
|
|
|
return -1;
|
2009-09-04 17:29:13 +03:00
|
|
|
switch (whence) {
|
|
|
|
|
case 0:
|
|
|
|
|
off = pos;
|
|
|
|
|
break;
|
|
|
|
|
case 1:
|
|
|
|
|
off = ctx->off + pos;
|
|
|
|
|
break;
|
|
|
|
|
case 2:
|
|
|
|
|
off = ctx->file_size + pos;
|
|
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
if (off < 0 || off > ctx->file_size)
|
|
|
|
|
return -1;
|
|
|
|
|
ctx->off = off;
|
|
|
|
|
return off;
|
|
|
|
|
}
|
2009-09-11 15:12:17 +03:00
|
|
|
|
2009-09-21 18:48:43 +03:00
|
|
|
uint32_t cli_bcapi_debug_print_str(struct cli_bc_ctx *ctx, const uint8_t *str, uint32_t len)
|
2009-09-11 15:12:17 +03:00
|
|
|
{
|
|
|
|
|
cli_dbgmsg("bytecode debug: %s\n", str);
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
uint32_t cli_bcapi_debug_print_uint(struct cli_bc_ctx *ctx, uint32_t a, uint32_t b)
|
|
|
|
|
{
|
|
|
|
|
cli_dbgmsg("bytecode debug: %u\n", a);
|
2009-10-02 12:27:52 +03:00
|
|
|
return 0;
|
2009-09-11 15:12:17 +03:00
|
|
|
}
|
2009-09-22 11:03:17 +03:00
|
|
|
|
|
|
|
|
/*TODO: compiler should make sure that only constants are passed here, and not
|
|
|
|
|
* pointers to arbitrary locations that may not be valid when bytecode finishes
|
|
|
|
|
* executing */
|
|
|
|
|
uint32_t cli_bcapi_setvirusname(struct cli_bc_ctx* ctx, const uint8_t *name, uint32_t len)
|
|
|
|
|
{
|
|
|
|
|
ctx->virname = name;
|
2009-10-02 12:27:52 +03:00
|
|
|
return 0;
|
2009-09-22 11:03:17 +03:00
|
|
|
}
|
2009-11-06 16:34:46 +02:00
|
|
|
|
|
|
|
|
uint32_t cli_bcapi_disasm_x86(struct cli_bc_ctx *ctx, struct DISASM_RESULT *res, uint32_t len)
|
|
|
|
|
{
|
|
|
|
|
//TODO: call disasm_x86_wrap, which outputs a MARIO struct
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
int32_t cli_bcapi_write(struct cli_bc_ctx *ctx, uint8_t*data, int32_t len)
|
|
|
|
|
{
|
2009-12-02 17:13:07 +02:00
|
|
|
int32_t res;
|
|
|
|
|
cli_ctx *cctx = (cli_ctx*)ctx->ctx;
|
|
|
|
|
if (len < 0) {
|
|
|
|
|
cli_warnmsg("Bytecode API: called with negative length!\n");
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
if (ctx->outfd == -1) {
|
|
|
|
|
ctx->tempfile = cli_gentemp(cctx ? cctx->engine->tmpdir : NULL);
|
|
|
|
|
if (!ctx->tempfile) {
|
|
|
|
|
cli_dbgmsg("Bytecode API: Unable to allocate memory for tempfile\n");
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
ctx->outfd = open(ctx->tempfile, O_RDWR|O_CREAT|O_EXCL|O_TRUNC|O_BINARY, 0600);
|
|
|
|
|
if (ctx->outfd == -1) {
|
|
|
|
|
cli_warnmsg("Bytecode API: Can't create file %s\n", ctx->tempfile);
|
|
|
|
|
free(ctx->tempfile);
|
|
|
|
|
return -1;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
if (cli_checklimits("bytecode api", cctx, ctx->written + len, 0, 0))
|
|
|
|
|
return -1;
|
|
|
|
|
res = cli_writen(ctx->outfd, data, len);
|
|
|
|
|
if (res > 0) ctx->written += res;
|
|
|
|
|
if (res == -1)
|
|
|
|
|
cli_dbgmsg("Bytecode API: write failed: %s\n", errno);
|
|
|
|
|
return res;
|
2009-11-06 16:34:46 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|