LIEF: Library to Instrument Executable Formats Version 0.17.0
Loading...
Searching...
No Matches
BinaryParser.hpp
Go to the documentation of this file.
1/* Copyright 2017 - 2025 R. Thomas
2 * Copyright 2017 - 2025 Quarkslab
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16#ifndef LIEF_MACHO_BINARY_PARSER_H
17#define LIEF_MACHO_BINARY_PARSER_H
18#include <memory>
19#include <string>
20#include <vector>
21#include <limits>
22#include <set>
23#include <map>
24#include <unordered_map>
25
26#include "LIEF/visibility.h"
27#include "LIEF/errors.hpp"
28
30
31#include "LIEF/MachO/enums.hpp"
35
36namespace LIEF {
37class BinaryStream;
38class SpanStream;
39
40namespace MachO {
41class AtomInfo;
43class CodeSignature;
45class DataInCode;
47class DylibCommand;
49class ExportInfo;
50class FunctionStarts;
53class LinkerOptHint;
54class Parser;
55class Section;
56class SegmentCommand;
58class Symbol;
59class SymbolCommand;
60class TwoLevelHints;
61struct ParserConfig;
62
63
64namespace details {
65struct dyld_chained_starts_in_segment;
66struct dyld_chained_fixups_header;
67union dyld_chained_ptr_arm64e;
68union dyld_chained_ptr_generic64;
69union dyld_chained_ptr_generic32;
70union dyld_chained_ptr_arm64e_segmented;
71}
72
79
80 friend class MachO::Parser;
81
83 constexpr static size_t MAX_RELOCATIONS = (std::numeric_limits<uint16_t>::max)();
84
86 constexpr static size_t MAX_COMMANDS = (std::numeric_limits<uint16_t>::max)();
87
88 public:
89 static std::unique_ptr<Binary> parse(const std::string& file);
90 static std::unique_ptr<Binary> parse(const std::string& file, const ParserConfig& conf);
91 static std::unique_ptr<Binary> parse(const std::vector<uint8_t>& data,
92 const ParserConfig& conf = ParserConfig::deep());
93
94 static std::unique_ptr<Binary> parse(const std::vector<uint8_t>& data, uint64_t fat_offset,
95 const ParserConfig& conf = ParserConfig::deep());
96
97 static std::unique_ptr<Binary> parse(std::unique_ptr<BinaryStream> stream, uint64_t fat_offset,
98 const ParserConfig& conf);
99
100 BinaryParser& operator=(const BinaryParser& copy) = delete;
101 BinaryParser(const BinaryParser& copy) = delete;
102
103 ~BinaryParser() override;
104
105 private:
106 using exports_list_t = std::vector<std::unique_ptr<ExportInfo>>;
108
109 LIEF_LOCAL ok_error_t init_and_parse();
110
111 template<class MACHO_T>
113
114 template<class MACHO_T>
115 LIEF_LOCAL ok_error_t parse_header();
116
117 template<class MACHO_T>
118 LIEF_LOCAL ok_error_t parse_load_commands();
119
120 template<class MACHO_T>
121 LIEF_LOCAL ok_error_t parse_relocations(Section& section);
122
123 // Dyld info parser
124 // ================
125
126 // Rebase
127 // ------
128 template<class MACHO_T>
129 LIEF_LOCAL ok_error_t parse_dyldinfo_rebases();
130
131 // Bindings
132 // --------
133 template<class MACHO_T>
134 LIEF_LOCAL ok_error_t parse_dyldinfo_binds();
135
136 template<class MACHO_T>
137 LIEF_LOCAL ok_error_t parse_dyldinfo_generic_bind();
138
139 template<class MACHO_T>
140 LIEF_LOCAL ok_error_t parse_dyldinfo_weak_bind();
141
142 template<class MACHO_T>
143 LIEF_LOCAL ok_error_t parse_dyldinfo_lazy_bind();
144
145 template<class MACHO_T>
146 LIEF_LOCAL ok_error_t infer_indirect_bindings();
147
148 template<class MACHO_T>
149 LIEF_LOCAL ok_error_t parse_symtab(SymbolCommand& cmd, SpanStream& nlist_s,
150 SpanStream& string_s);
151
152 LIEF_LOCAL ok_error_t parse_indirect_symbols(
153 DynamicSymbolCommand& cmd, std::vector<Symbol*>& symtab,
154 BinaryStream& indirect_stream);
155
156
157 template<class MACHO_T>
158 LIEF_LOCAL ok_error_t parse_data_in_code(DataInCode& cmd, BinaryStream& stream);
159
160 using it_opaque_segments = void*; // To avoid including Binary.hpp. It must contains it_opaque_segments
161
162 template<class MACHO_T>
163 LIEF_LOCAL ok_error_t do_bind(DyldBindingInfo::CLASS cls, uint8_t type, uint8_t segment_idx,
164 uint64_t segment_offset, const std::string& symbol_name,
165 int32_t ord, int64_t addend, bool is_weak,
166 bool is_non_weak_definition, it_opaque_segments segments_ptr, uint64_t offset = 0);
167
168
169 template<class MACHO_T>
170 LIEF_LOCAL ok_error_t do_rebase(
171 uint8_t type, uint8_t segment_idx, uint64_t segment_offset,
172 it_opaque_segments segments);
173
174 /*
175 * This set of functions are related to the parsing of LC_DYLD_CHAINED_FIXUPS
176 */
177 template<class MACHO_T>
178 LIEF_LOCAL ok_error_t parse_chained_payload(SpanStream& stream);
179
180 template<class MACHO_T>
181 LIEF_LOCAL ok_error_t parse_chained_import(
182 const details::dyld_chained_fixups_header& header, SpanStream& stream,
183 SpanStream& symbol_pool);
184
185 template<class MACHO_T>
186 LIEF_LOCAL ok_error_t parse_chained_fixup(
187 const details::dyld_chained_fixups_header& header, SpanStream& stream);
188
189 template<class MACHO_T>
190 LIEF_LOCAL ok_error_t parse_fixup_seg(
191 SpanStream& stream, uint32_t seg_info_offset, uint64_t offset,
192 uint32_t seg_idx);
193
194 template<class MACHO_T>
195 LIEF_LOCAL ok_error_t do_fixup(
196 DYLD_CHAINED_FORMAT fmt, int32_t ord, const std::string& symbol_name,
197 int64_t addend, bool is_weak);
198
199 template<class MACHO_T>
200 LIEF_LOCAL ok_error_t process_fixup(
201 SegmentCommand& segment, uint64_t chain_address, uint64_t chain_offset,
202 const details::dyld_chained_starts_in_segment& seg_info);
203
204 template<class MACHO_T>
205 LIEF_LOCAL result<uint64_t> next_chain(
206 uint64_t& chain_address, uint64_t chain_offset,
207 const details::dyld_chained_starts_in_segment& seg_info);
208
209 template<class MACHO_T>
210 LIEF_LOCAL ok_error_t walk_chain(
211 SegmentCommand& segment, uint64_t chain_address, uint64_t chain_offset,
212 const details::dyld_chained_starts_in_segment& seg_info);
213
214 LIEF_LOCAL ok_error_t do_chained_fixup(
215 SegmentCommand& segment, uint64_t chain_address, uint32_t chain_offset,
216 const details::dyld_chained_starts_in_segment& seg_info,
217 const details::dyld_chained_ptr_arm64e& fixup);
218
219 LIEF_LOCAL ok_error_t do_chained_fixup(
220 SegmentCommand& segment, uint64_t chain_address, uint32_t chain_offset,
221 const details::dyld_chained_starts_in_segment& seg_info,
222 const details::dyld_chained_ptr_generic64& fixup);
223
224 LIEF_LOCAL ok_error_t do_chained_fixup(
225 SegmentCommand& segment, uint64_t chain_address, uint32_t chain_offset,
226 const details::dyld_chained_starts_in_segment& seg_info,
227 const details::dyld_chained_ptr_generic32 & fixup);
228
229 LIEF_LOCAL ok_error_t do_chained_fixup(
230 SegmentCommand& segment, uint64_t chain_address, uint32_t chain_offset,
231 const details::dyld_chained_starts_in_segment& seg_info,
232 const details::dyld_chained_ptr_arm64e_segmented& fixup);
233
234 template<class MACHO_T>
235 LIEF_LOCAL ok_error_t post_process(SymbolCommand& cmd);
236
237 template<class MACHO_T>
238 LIEF_LOCAL ok_error_t post_process(FunctionStarts& cmd);
239
240 template<class MACHO_T>
241 LIEF_LOCAL ok_error_t post_process(DataInCode& cmd);
242
243 template<class MACHO_T>
244 LIEF_LOCAL ok_error_t post_process(SegmentSplitInfo& cmd);
245
246 template<class MACHO_T>
247 LIEF_LOCAL ok_error_t post_process(DynamicSymbolCommand& cmd);
248
249 template<class MACHO_T>
250 LIEF_LOCAL ok_error_t post_process(LinkerOptHint& cmd);
251
252 template<class MACHO_T>
253 LIEF_LOCAL ok_error_t post_process(AtomInfo& cmd);
254
255 template<class MACHO_T>
256 LIEF_LOCAL ok_error_t post_process(TwoLevelHints& cmd);
257
258 template<class MACHO_T>
259 LIEF_LOCAL ok_error_t post_process(CodeSignature& cmd);
260
261 template<class MACHO_T>
262 LIEF_LOCAL ok_error_t post_process(CodeSignatureDir& cmd);
263
264 template<class MACHO_T>
265 LIEF_LOCAL ok_error_t post_process(FunctionVariants& cmd);
266
267 template<class MACHO_T>
269
270 LIEF_LOCAL ok_error_t parse_overlay();
271
272 // Exports
273 // -------
274 LIEF_LOCAL ok_error_t parse_dyldinfo_export();
275 LIEF_LOCAL ok_error_t parse_dyld_exports();
276
277 LIEF_LOCAL ok_error_t parse_export_trie(
278 exports_list_t& exports, BinaryStream& stream,
279 uint64_t start, const std::string& prefix, bool* invalid_names);
280
281 LIEF_LOCAL void copy_from(ChainedBindingInfo& to, ChainedBindingInfo& from);
282
283 std::unique_ptr<BinaryStream> stream_;
284 std::unique_ptr<Binary> binary_;
286 bool is64_ = true;
287 ParserConfig config_;
288 std::set<uint64_t> visited_;
289 std::unordered_map<std::string, Symbol*> memoized_symbols_;
290 std::map<uint64_t, Symbol*> memoized_symbols_by_address_;
291
292 std::vector<DylibCommand*> binding_libs_;
293 std::set<uint64_t> dyld_reloc_addrs_;
294
295 // Cache of DyldChainedFixups
296 DyldChainedFixups* chained_fixups_ = nullptr;
297};
298
299
300} // namespace MachO
301} // namespace LIEF
302#endif
Class that is used to a read stream of data from different sources.
Definition BinaryStream.hpp:33
Class which represents the LC_ATOM_INFO command.
Definition AtomInfo.hpp:35
BinaryParser(const BinaryParser &copy)=delete
BinaryParser & operator=(const BinaryParser &copy)=delete
static std::unique_ptr< Binary > parse(std::unique_ptr< BinaryStream > stream, uint64_t fat_offset, const ParserConfig &conf)
static std::unique_ptr< Binary > parse(const std::vector< uint8_t > &data, uint64_t fat_offset, const ParserConfig &conf=ParserConfig::deep())
static std::unique_ptr< Binary > parse(const std::string &file)
static std::unique_ptr< Binary > parse(const std::string &file, const ParserConfig &conf)
static std::unique_ptr< Binary > parse(const std::vector< uint8_t > &data, const ParserConfig &conf=ParserConfig::deep())
This class represents a symbol binding operation associated with the LC_DYLD_CHAINED_FIXUPS command.
Definition ChainedBindingInfo.hpp:48
Definition CodeSignatureDir.hpp:36
Definition CodeSignature.hpp:37
Interface of the LC_DATA_IN_CODE command This command is used to list slices of code sections that co...
Definition DataInCode.hpp:42
CLASS
Definition DyldBindingInfo.hpp:38
Class that represents the LC_DYLD_CHAINED_FIXUPS command.
Definition DyldChainedFixups.hpp:49
Class which represents a library dependency.
Definition DylibCommand.hpp:34
Class that represents the LC_DYSYMTAB command.
Definition DynamicSymbolCommand.hpp:40
Class that provides an interface over the Dyld export info.
Definition ExportInfo.hpp:38
Class which represents the LC_FUNCTION_STARTS command.
Definition FunctionStarts.hpp:39
Class which represents the LC_FUNCTION_VARIANT_FIXUPS command.
Definition FunctionVariantFixups.hpp:34
Class representing the LC_FUNCTION_VARIANTS load command.
Definition FunctionVariants.hpp:59
Class which represents the LC_LINKER_OPTIMIZATION_HINT command.
Definition LinkerOptHint.hpp:37
The main interface to parse a Mach-O binary.
Definition MachO/Parser.hpp:42
Class that represents a Mach-O section.
Definition MachO/Section.hpp:46
Class which represents a LoadCommand::TYPE::SEGMENT / LoadCommand::TYPE::SEGMENT_64 command.
Definition SegmentCommand.hpp:50
Class that represents the LoadCommand::TYPE::SEGMENT_SPLIT_INFO command.
Definition SegmentSplitInfo.hpp:35
Class that represents the LC_SYMTAB command.
Definition SymbolCommand.hpp:35
Class that represents a Symbol in a Mach-O file.
Definition MachO/Symbol.hpp:47
Class which represents the LC_TWOLEVEL_HINTS command.
Definition TwoLevelHints.hpp:39
Main interface to parse an executable regardless of its format.
Definition Abstract/Parser.hpp:30
Definition SpanStream.hpp:32
Definition endianness_support.hpp:59
Namespace related to the LIEF's Mach-O module.
Definition Abstract/Header.hpp:36
DYLD_CHAINED_FORMAT
Definition DyldChainedFormat.hpp:22
MACHO_TYPES
Definition MachO/enums.hpp:23
@ MAGIC_64
64-bit big-endian magic
Definition MachO/enums.hpp:27
LIEF namespace.
Definition Abstract/Binary.hpp:40
result< ok_t > ok_error_t
Opaque structure that is used by LIEF to avoid writing result<void> f(...). Instead,...
Definition errors.hpp:109
tl::expected< T, lief_errors > result
Wrapper that contains an Object (T) or an error.
Definition errors.hpp:75
This structure is used to tweak the MachO Parser (MachO::Parser).
Definition MachO/ParserConfig.hpp:24
static ParserConfig deep()
Return a parser configuration such as all the objects supported by LIEF are parsed.
#define LIEF_API
Definition visibility.h:41
#define LIEF_LOCAL
Definition visibility.h:42