The idea of this patch is to add x64 support for taint analysis of DWARF symbols. The pri_dwarf plugin is rewritten into dwarf2 plugin to support the extension of new architectures. Now the pri_dwarf plugin is split into two parts: the first part is a Python script that reformats the outputs of dwarfdump command into a few JSON files, and the second part is the dwarf2 plugin which takes in the pre-processed DWARF info.
In conclusion, this patch includes:
A Python script that dumps Dwarf info into JSON files. (dwarfdump.py)
dwarf2 PANDA plugin that replaces the old pri_dwarf plugin.
Fixups in pri_taint PANDA plugin to use new dwarf2 plugin.
Other minor fixes in file_taint and stringsearch plugins
The idea of this patch is to add x64 support for taint analysis of DWARF symbols. The
pri_dwarf
plugin is rewritten intodwarf2
plugin to support the extension of new architectures. Now thepri_dwarf
plugin is split into two parts: the first part is a Python script that reformats the outputs ofdwarfdump
command into a few JSON files, and the second part is thedwarf2
plugin which takes in the pre-processed DWARF info.In conclusion, this patch includes:
dwarf2
PANDA plugin that replaces the oldpri_dwarf
plugin.pri_taint
PANDA plugin to use newdwarf2
plugin.file_taint
andstringsearch
plugins