Class: Rex::MachParsey::Fat

Inherits:
FatBase
  • Object
show all
Defined in:
lib/rex/machparsey/mach.rb

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(isource, offset = 0) ⇒ Fat

Returns a new instance of Fat.



107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
 
# File 'lib/rex/machparsey/mach.rb', line 107

def initialize(isource, offset = 0)
  self.fat_archs = []
  self.machos = []
  self.isource = isource
  self.fat_header = FatHeader.new(isource.read(offset, FAT_HEADER_SIZE))

  if !self.fat_header
    raise FatHeaderError, "Could not parse FAT header"
  end

  print "Detected " +  self.fat_header.nfat_arch.to_s +  " archs in binary.\n"

  offset += FAT_HEADER_SIZE

  self.fat_header.nfat_arch.times do
    fat_arch = FatArch.new(isource.read(offset, FAT_ARCH_SIZE), self.fat_header.endian)
    self.fat_archs << fat_arch
    self.machos << Mach.new(isource, fat_arch.offset, true)
    offset += FAT_ARCH_SIZE
  end


end

Instance Attribute Details

#fat_archs ⇒ Object

Returns the value of attribute fat_archs.



105
106
107
 
# File 'lib/rex/machparsey/mach.rb', line 105

def fat_archs
  @fat_archs
end

#fat_header ⇒ Object

Returns the value of attribute fat_header.



105
106
107
 
# File 'lib/rex/machparsey/mach.rb', line 105

def fat_header
  @fat_header
end

#isource ⇒ Object

Returns the value of attribute isource.



105
106
107
 
# File 'lib/rex/machparsey/mach.rb', line 105

def isource
  @isource
end

#machos ⇒ Object

Returns the value of attribute machos.



105
106
107
 
# File 'lib/rex/machparsey/mach.rb', line 105

def machos
  @machos
end

Class Method Details

.new_from_file(filename, disk_backed = false) ⇒ Object 



163
164
165
166
167
168
169
170
171
172
173
174
 
# File 'lib/rex/machparsey/mach.rb', line 163

def self.new_from_file(filename, disk_backed = false)

  file = ::File.open(filename, "rb")

  if disk_backed
    return self.new(ImageSource::Disk.new(file))
  else
    obj = new_from_string(file.read)
    file.close
    return obj
  end
end

.new_from_string(data) ⇒ Object 



177
178
179
 
# File 'lib/rex/machparsey/mach.rb', line 177

def self.new_from_string(data)
  return self.new(ImageSource::Memory.new(data))
end

Instance Method Details

#_parse_fat_header(isource, offset) ⇒ Object

this is useful for debugging but we don’t use it for anything.



132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
 
# File 'lib/rex/machparsey/mach.rb', line 132

def _parse_fat_header(isource, offset)
  archs = []
  nfat_arch = self.fat_header.nfat_arch

  print "Number of archs in binary: " + nfat_arch.to_s + "\n"

  nfat_arch.times do
    arch = FatArch.new(isource.read(offset, FAT_ARCH_SIZE), self.endian)

    case arch.cpu_type

    when CPU_TYPE_I386
      print "i386\n"

    when CPU_TYPE_X86_64
      print "x86_64\n"

    when CPU_TYPE_ARM
      print "Arm\n"

    when CPU_TYPE_POWERPC
      print "Power PC\n"

    when CPU_TYPE_POWERPC64
      print "Power PC 64\n"
    end

    offset += FAT_ARCH_SIZE
  end
end

#close ⇒ Object 



201
202
203
 
# File 'lib/rex/machparsey/mach.rb', line 201

def close
  isource.close
end

#index(*args) ⇒ Object 



197
198
199
 
# File 'lib/rex/machparsey/mach.rb', line 197

def index(*args)
  isource.index(*args)
end

#ptr_32? ⇒ Boolean

Returns:

  • (Boolean) 


185
186
187
 
# File 'lib/rex/machparsey/mach.rb', line 185

def ptr_32?
  ptr_64? == false
end

#ptr_64? ⇒ Boolean

Returns:

  • (Boolean) 


181
182
183
 
# File 'lib/rex/machparsey/mach.rb', line 181

def ptr_64?
  mach_header.bits == BITS_64
end

#ptr_s(vaddr) ⇒ Object 



189
190
191
 
# File 'lib/rex/machparsey/mach.rb', line 189

def ptr_s(vaddr)
  (ptr_32?) ? ("0x%.8x" % vaddr) : ("0x%.16x" % vaddr)
end

#read(offset, len) ⇒ Object 



193
194
195
 
# File 'lib/rex/machparsey/mach.rb', line 193

def read(offset, len)
  isource.read(offset, len)
end