mirror of https://github.com/Cisco-Talos/clamav
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
187 lines
7.9 KiB
187 lines
7.9 KiB
/*
|
|
* ClamAV bytecode internal API
|
|
* This is an automatically generated file!
|
|
*
|
|
* Copyright (C) 2009-2010 Sourcefire, Inc.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE
|
|
*/
|
|
#include "cltypes.h"
|
|
#include "type_desc.h"
|
|
#include "bytecode_api.h"
|
|
#include "bytecode_api_impl.h"
|
|
#include "bytecode_priv.h"
|
|
#include <stdlib.h>
|
|
|
|
uint32_t cli_bcapi_test0(struct cli_bc_ctx *ctx, struct foo*, uint32_t);
|
|
uint32_t cli_bcapi_test1(struct cli_bc_ctx *ctx, uint32_t, uint32_t);
|
|
int32_t cli_bcapi_read(struct cli_bc_ctx *ctx, uint8_t*, int32_t);
|
|
int32_t cli_bcapi_write(struct cli_bc_ctx *ctx, uint8_t*, int32_t);
|
|
int32_t cli_bcapi_seek(struct cli_bc_ctx *ctx, int32_t, uint32_t);
|
|
uint32_t cli_bcapi_setvirusname(struct cli_bc_ctx *ctx, const uint8_t*, uint32_t);
|
|
uint32_t cli_bcapi_debug_print_str(struct cli_bc_ctx *ctx, const uint8_t*, uint32_t);
|
|
uint32_t cli_bcapi_debug_print_uint(struct cli_bc_ctx *ctx, uint32_t);
|
|
uint32_t cli_bcapi_disasm_x86(struct cli_bc_ctx *ctx, struct DISASM_RESULT*, uint32_t);
|
|
uint32_t cli_bcapi_trace_directory(struct cli_bc_ctx *ctx, const uint8_t*, uint32_t);
|
|
uint32_t cli_bcapi_trace_scope(struct cli_bc_ctx *ctx, const uint8_t*, uint32_t);
|
|
uint32_t cli_bcapi_trace_source(struct cli_bc_ctx *ctx, const uint8_t*, uint32_t);
|
|
uint32_t cli_bcapi_trace_op(struct cli_bc_ctx *ctx, const uint8_t*, uint32_t);
|
|
uint32_t cli_bcapi_trace_value(struct cli_bc_ctx *ctx, const uint8_t*, uint32_t);
|
|
uint32_t cli_bcapi_trace_ptr(struct cli_bc_ctx *ctx, const uint8_t*, uint32_t);
|
|
uint32_t cli_bcapi_pe_rawaddr(struct cli_bc_ctx *ctx, uint32_t);
|
|
int32_t cli_bcapi_file_find(struct cli_bc_ctx *ctx, const uint8_t*, uint32_t);
|
|
int32_t cli_bcapi_file_byteat(struct cli_bc_ctx *ctx, uint32_t);
|
|
uint8_t* cli_bcapi_malloc(struct cli_bc_ctx *ctx, uint32_t);
|
|
uint32_t cli_bcapi_test2(struct cli_bc_ctx *ctx, uint32_t);
|
|
|
|
const struct cli_apiglobal cli_globals[] = {
|
|
/* Bytecode globals BEGIN */
|
|
{"__clambc_kind", GLOBAL_KIND, 16,
|
|
((char*)&((struct cli_bc_ctx*)0)->hooks.kind - (char*)NULL)},
|
|
{"__clambc_match_counts", GLOBAL_MATCH_COUNTS, 84,
|
|
((char*)&((struct cli_bc_ctx*)0)->hooks.match_counts - (char*)NULL)},
|
|
{"__clambc_filesize", GLOBAL_FILESIZE, 83,
|
|
((char*)&((struct cli_bc_ctx*)0)->hooks.filesize - (char*)NULL)},
|
|
{"__clambc_exeinfo", GLOBAL_EXEINFO, 79,
|
|
((char*)&((struct cli_bc_ctx*)0)->hooks.exeinfo - (char*)NULL)},
|
|
{"__clambc_pedata", GLOBAL_PEDATA, 69,
|
|
((char*)&((struct cli_bc_ctx*)0)->hooks.pedata - (char*)NULL)}
|
|
/* Bytecode globals END */
|
|
};
|
|
const unsigned cli_apicall_maxglobal = _LAST_GLOBAL-1;
|
|
static uint16_t cli_tmp0[]={79, 77, 75, 72, 70, 32, 32, 32, 32, 8, 65};
|
|
static uint16_t cli_tmp1[]={71};
|
|
static uint16_t cli_tmp2[]={32, 32};
|
|
static uint16_t cli_tmp3[]={73};
|
|
static uint16_t cli_tmp4[]={16, 8, 8, 32, 32, 32, 32, 32, 64, 32, 32, 16, 16, 16, 16, 16, 16, 32, 32, 32, 32, 16, 16, 64, 64, 64, 64, 32, 32, 74};
|
|
static uint16_t cli_tmp5[]={71};
|
|
static uint16_t cli_tmp6[]={76};
|
|
static uint16_t cli_tmp7[]={16, 8, 8, 32, 32, 32, 32, 32, 32, 32, 32, 32, 16, 16, 16, 16, 16, 16, 32, 32, 32, 32, 16, 16, 32, 32, 32, 32, 32, 32, 74};
|
|
static uint16_t cli_tmp8[]={78};
|
|
static uint16_t cli_tmp9[]={32, 16, 16, 32, 32, 32, 16, 16};
|
|
static uint16_t cli_tmp10[]={81, 32, 32, 16, 80};
|
|
static uint16_t cli_tmp11[]={8};
|
|
static uint16_t cli_tmp12[]={82};
|
|
static uint16_t cli_tmp13[]={32, 32, 32, 32, 32, 32, 32, 32, 32};
|
|
static uint16_t cli_tmp14[]={32};
|
|
static uint16_t cli_tmp15[]={32};
|
|
static uint16_t cli_tmp16[]={32, 32};
|
|
static uint16_t cli_tmp17[]={65, 32};
|
|
static uint16_t cli_tmp18[]={32, 65, 32};
|
|
static uint16_t cli_tmp19[]={32, 89, 32};
|
|
static uint16_t cli_tmp20[]={90};
|
|
static uint16_t cli_tmp21[]={16, 8, 8, 8, 92, 91};
|
|
static uint16_t cli_tmp22[]={8};
|
|
static uint16_t cli_tmp23[]={93};
|
|
static uint16_t cli_tmp24[]={8};
|
|
static uint16_t cli_tmp25[]={32, 32, 32};
|
|
static uint16_t cli_tmp26[]={32, 96, 32};
|
|
static uint16_t cli_tmp27[]={97};
|
|
static uint16_t cli_tmp28[]={96};
|
|
|
|
const struct cli_bc_type cli_apicall_types[]={
|
|
{DStructType, cli_tmp0, 11, 0, 0},
|
|
{DPointerType, cli_tmp1, 1, 0, 0},
|
|
{DStructType, cli_tmp2, 2, 0, 0},
|
|
{DPointerType, cli_tmp3, 1, 0, 0},
|
|
{DStructType, cli_tmp4, 30, 0, 0},
|
|
{DArrayType, cli_tmp5, 16, 0, 0},
|
|
{DPointerType, cli_tmp6, 1, 0, 0},
|
|
{DStructType, cli_tmp7, 31, 0, 0},
|
|
{DPointerType, cli_tmp8, 1, 0, 0},
|
|
{DStructType, cli_tmp9, 8, 0, 0},
|
|
{DStructType, cli_tmp10, 5, 0, 0},
|
|
{DPointerType, cli_tmp11, 1, 0, 0},
|
|
{DPointerType, cli_tmp12, 1, 0, 0},
|
|
{DStructType, cli_tmp13, 9, 0, 0},
|
|
{DArrayType, cli_tmp14, 1, 0, 0},
|
|
{DArrayType, cli_tmp15, 64, 0, 0},
|
|
{DFunctionType, cli_tmp16, 2, 0, 0},
|
|
{DFunctionType, cli_tmp17, 2, 0, 0},
|
|
{DFunctionType, cli_tmp18, 3, 0, 0},
|
|
{DFunctionType, cli_tmp19, 3, 0, 0},
|
|
{DPointerType, cli_tmp20, 1, 0, 0},
|
|
{DStructType, cli_tmp21, 6, 0, 0},
|
|
{DArrayType, cli_tmp22, 29, 0, 0},
|
|
{DArrayType, cli_tmp23, 3, 0, 0},
|
|
{DArrayType, cli_tmp24, 10, 0, 0},
|
|
{DFunctionType, cli_tmp25, 3, 0, 0},
|
|
{DFunctionType, cli_tmp26, 3, 0, 0},
|
|
{DPointerType, cli_tmp27, 1, 0, 0},
|
|
{DStructType, cli_tmp28, 1, 0, 0}
|
|
};
|
|
|
|
const unsigned cli_apicall_maxtypes=sizeof(cli_apicall_types)/sizeof(cli_apicall_types[0]);
|
|
const struct cli_apicall cli_apicalls[]={
|
|
/* Bytecode APIcalls BEGIN */
|
|
{"test0", 26, 0, 1},
|
|
{"test1", 25, 0, 0},
|
|
{"read", 18, 1, 1},
|
|
{"write", 18, 2, 1},
|
|
{"seek", 25, 1, 0},
|
|
{"setvirusname", 18, 3, 1},
|
|
{"debug_print_str", 18, 4, 1},
|
|
{"debug_print_uint", 16, 0, 2},
|
|
{"disasm_x86", 19, 5, 1},
|
|
{"trace_directory", 18, 6, 1},
|
|
{"trace_scope", 18, 7, 1},
|
|
{"trace_source", 18, 8, 1},
|
|
{"trace_op", 18, 9, 1},
|
|
{"trace_value", 18, 10, 1},
|
|
{"trace_ptr", 18, 11, 1},
|
|
{"pe_rawaddr", 16, 1, 2},
|
|
{"file_find", 18, 12, 1},
|
|
{"file_byteat", 16, 2, 2},
|
|
{"malloc", 17, 0, 3},
|
|
{"test2", 16, 3, 2}
|
|
/* Bytecode APIcalls END */
|
|
};
|
|
const cli_apicall_int2 cli_apicalls0[] = {
|
|
(cli_apicall_int2)cli_bcapi_test1,
|
|
(cli_apicall_int2)cli_bcapi_seek
|
|
};
|
|
const cli_apicall_pointer cli_apicalls1[] = {
|
|
(cli_apicall_pointer)cli_bcapi_test0,
|
|
(cli_apicall_pointer)cli_bcapi_read,
|
|
(cli_apicall_pointer)cli_bcapi_write,
|
|
(cli_apicall_pointer)cli_bcapi_setvirusname,
|
|
(cli_apicall_pointer)cli_bcapi_debug_print_str,
|
|
(cli_apicall_pointer)cli_bcapi_disasm_x86,
|
|
(cli_apicall_pointer)cli_bcapi_trace_directory,
|
|
(cli_apicall_pointer)cli_bcapi_trace_scope,
|
|
(cli_apicall_pointer)cli_bcapi_trace_source,
|
|
(cli_apicall_pointer)cli_bcapi_trace_op,
|
|
(cli_apicall_pointer)cli_bcapi_trace_value,
|
|
(cli_apicall_pointer)cli_bcapi_trace_ptr,
|
|
(cli_apicall_pointer)cli_bcapi_file_find
|
|
};
|
|
const cli_apicall_int1 cli_apicalls2[] = {
|
|
(cli_apicall_int1)cli_bcapi_debug_print_uint,
|
|
(cli_apicall_int1)cli_bcapi_pe_rawaddr,
|
|
(cli_apicall_int1)cli_bcapi_file_byteat,
|
|
(cli_apicall_int1)cli_bcapi_test2
|
|
};
|
|
const cli_apicall_malloclike cli_apicalls3[] = {
|
|
(cli_apicall_malloclike)cli_bcapi_malloc
|
|
};
|
|
const unsigned cli_apicall_maxapi = sizeof(cli_apicalls)/sizeof(cli_apicalls[0]);
|
|
|