program_detector.cc 1.8 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556
  1. // Copyright 2016 The Chromium Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style license that can be
  3. // found in the LICENSE file.
  4. #include "courgette/program_detector.h"
  5. #include <memory>
  6. #include "courgette/disassembler.h"
  7. #include "courgette/disassembler_elf_32_x86.h"
  8. #include "courgette/disassembler_win32_x64.h"
  9. #include "courgette/disassembler_win32_x86.h"
  10. namespace courgette {
  11. std::unique_ptr<Disassembler> DetectDisassembler(const uint8_t* buffer,
  12. size_t length) {
  13. std::unique_ptr<Disassembler> disassembler;
  14. if (DisassemblerWin32X86::QuickDetect(buffer, length)) {
  15. disassembler = std::make_unique<DisassemblerWin32X86>(buffer, length);
  16. if (disassembler->ParseHeader())
  17. return disassembler;
  18. }
  19. if (DisassemblerWin32X64::QuickDetect(buffer, length)) {
  20. disassembler = std::make_unique<DisassemblerWin32X64>(buffer, length);
  21. if (disassembler->ParseHeader())
  22. return disassembler;
  23. }
  24. if (DisassemblerElf32X86::QuickDetect(buffer, length)) {
  25. disassembler = std::make_unique<DisassemblerElf32X86>(buffer, length);
  26. if (disassembler->ParseHeader())
  27. return disassembler;
  28. }
  29. return nullptr;
  30. }
  31. Status DetectExecutableType(const uint8_t* buffer,
  32. size_t length,
  33. ExecutableType* type,
  34. size_t* detected_length) {
  35. std::unique_ptr<Disassembler> disassembler(
  36. DetectDisassembler(buffer, length));
  37. if (!disassembler) { // We failed to detect anything.
  38. *type = EXE_UNKNOWN;
  39. *detected_length = 0;
  40. return C_INPUT_NOT_RECOGNIZED;
  41. }
  42. *type = disassembler->kind();
  43. *detected_length = disassembler->length();
  44. return C_OK;
  45. }
  46. } // namespace courgette