Coverage Report

Created: 2026-07-16 06:55

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/capstonev5/cs.c
Line
Count
Source
1
/* Capstone Disassembly Engine */
2
/* By Nguyen Anh Quynh <aquynh@gmail.com>, 2013-2019 */
3
#if defined (WIN32) || defined (WIN64) || defined (_WIN32) || defined (_WIN64)
4
#pragma warning(disable:4996)     // disable MSVC's warning on strcpy()
5
#pragma warning(disable:28719)    // disable MSVC's warning on strcpy()
6
#endif
7
#if defined(CAPSTONE_HAS_OSXKERNEL)
8
#include <Availability.h>
9
#include <libkern/libkern.h>
10
#else
11
#include <stddef.h>
12
#include <stdio.h>
13
#include <stdlib.h>
14
#endif
15
16
#include <string.h>
17
#include <capstone/capstone.h>
18
19
#include "utils.h"
20
#include "MCRegisterInfo.h"
21
22
#if defined(_KERNEL_MODE)
23
#include "windows\winkernel_mm.h"
24
#endif
25
26
// Issue #681: Windows kernel does not support formatting float point
27
#if defined(_KERNEL_MODE) && !defined(CAPSTONE_DIET)
28
#if defined(CAPSTONE_HAS_ARM) || defined(CAPSTONE_HAS_ARM64) || defined(CAPSTONE_HAS_M68K)
29
#define CAPSTONE_STR_INTERNAL(x) #x
30
#define CAPSTONE_STR(x) CAPSTONE_STR_INTERNAL(x)
31
#define CAPSTONE_MSVC_WRANING_PREFIX __FILE__ "("CAPSTONE_STR(__LINE__)") : warning message : "
32
33
#pragma message(CAPSTONE_MSVC_WRANING_PREFIX "Windows driver does not support full features for selected architecture(s). Define CAPSTONE_DIET to compile Capstone with only supported features. See issue #681 for details.")
34
35
#undef CAPSTONE_MSVC_WRANING_PREFIX
36
#undef CAPSTONE_STR
37
#undef CAPSTONE_STR_INTERNAL
38
#endif
39
#endif  // defined(_KERNEL_MODE) && !defined(CAPSTONE_DIET)
40
41
#if !defined(CAPSTONE_HAS_OSXKERNEL) && !defined(CAPSTONE_DIET) && !defined(_KERNEL_MODE)
42
37.1k
#define INSN_CACHE_SIZE 32
43
#else
44
// reduce stack variable size for kernel/firmware
45
#define INSN_CACHE_SIZE 8
46
#endif
47
48
// default SKIPDATA mnemonic
49
#ifndef CAPSTONE_DIET
50
37.1k
#define SKIPDATA_MNEM ".byte"
51
#else // No printing is available in diet mode
52
#define SKIPDATA_MNEM NULL
53
#endif
54
55
#include "arch/AArch64/AArch64Module.h"
56
#include "arch/ARM/ARMModule.h"
57
#include "arch/EVM/EVMModule.h"
58
#include "arch/WASM/WASMModule.h"
59
#include "arch/M680X/M680XModule.h"
60
#include "arch/M68K/M68KModule.h"
61
#include "arch/Mips/MipsModule.h"
62
#include "arch/PowerPC/PPCModule.h"
63
#include "arch/Sparc/SparcModule.h"
64
#include "arch/SystemZ/SystemZModule.h"
65
#include "arch/TMS320C64x/TMS320C64xModule.h"
66
#include "arch/X86/X86Module.h"
67
#include "arch/XCore/XCoreModule.h"
68
#include "arch/RISCV/RISCVModule.h"
69
#include "arch/MOS65XX/MOS65XXModule.h"
70
#include "arch/BPF/BPFModule.h"
71
#include "arch/SH/SHModule.h"
72
#include "arch/TriCore/TriCoreModule.h"
73
74
static const struct {
75
  // constructor initialization
76
  cs_err (*arch_init)(cs_struct *);
77
  // support cs_option()
78
  cs_err (*arch_option)(cs_struct *, cs_opt_type, size_t value);
79
  // bitmask for finding disallowed modes for an arch:
80
  // to be called in cs_open()/cs_option()
81
  cs_mode arch_disallowed_mode_mask;
82
} arch_configs[MAX_ARCH] = {
83
#ifdef CAPSTONE_HAS_ARM
84
  {
85
    ARM_global_init,
86
    ARM_option,
87
    ~(CS_MODE_LITTLE_ENDIAN | CS_MODE_ARM | CS_MODE_V8 | CS_MODE_MCLASS
88
        | CS_MODE_THUMB | CS_MODE_BIG_ENDIAN)
89
  },
90
#else
91
  { NULL, NULL, 0 },
92
#endif
93
#ifdef CAPSTONE_HAS_ARM64
94
  {
95
    AArch64_global_init,
96
    AArch64_option,
97
    ~(CS_MODE_LITTLE_ENDIAN | CS_MODE_ARM | CS_MODE_BIG_ENDIAN),
98
  },
99
#else
100
  { NULL, NULL, 0 },
101
#endif
102
#ifdef CAPSTONE_HAS_MIPS
103
  {
104
    Mips_global_init,
105
    Mips_option,
106
    ~(CS_MODE_LITTLE_ENDIAN | CS_MODE_32 | CS_MODE_64 | CS_MODE_MICRO
107
        | CS_MODE_MIPS32R6 | CS_MODE_BIG_ENDIAN | CS_MODE_MIPS2 | CS_MODE_MIPS3),
108
  },
109
#else
110
  { NULL, NULL, 0 },
111
#endif
112
#ifdef CAPSTONE_HAS_X86
113
  {
114
    X86_global_init,
115
    X86_option,
116
    ~(CS_MODE_LITTLE_ENDIAN | CS_MODE_32 | CS_MODE_64 | CS_MODE_16),
117
  },
118
#else
119
  { NULL, NULL, 0 },
120
#endif
121
#ifdef CAPSTONE_HAS_POWERPC
122
  {
123
    PPC_global_init,
124
    PPC_option,
125
    ~(CS_MODE_LITTLE_ENDIAN | CS_MODE_32 | CS_MODE_64 | CS_MODE_BIG_ENDIAN
126
        | CS_MODE_QPX | CS_MODE_PS),
127
  },
128
#else
129
  { NULL, NULL, 0 },
130
#endif
131
#ifdef CAPSTONE_HAS_SPARC
132
  {
133
    Sparc_global_init,
134
    Sparc_option,
135
    ~(CS_MODE_BIG_ENDIAN | CS_MODE_V9),
136
  },
137
#else
138
  { NULL, NULL, 0 },
139
#endif
140
#ifdef CAPSTONE_HAS_SYSZ
141
  {
142
    SystemZ_global_init,
143
    SystemZ_option,
144
    ~(CS_MODE_BIG_ENDIAN),
145
  },
146
#else
147
  { NULL, NULL, 0 },
148
#endif
149
#ifdef CAPSTONE_HAS_XCORE
150
  {
151
    XCore_global_init,
152
    XCore_option,
153
    ~(CS_MODE_BIG_ENDIAN),
154
  },
155
#else
156
  { NULL, NULL, 0 },
157
#endif
158
#ifdef CAPSTONE_HAS_M68K
159
  {
160
    M68K_global_init,
161
    M68K_option,
162
    ~(CS_MODE_BIG_ENDIAN | CS_MODE_M68K_000 | CS_MODE_M68K_010 | CS_MODE_M68K_020
163
        | CS_MODE_M68K_030 | CS_MODE_M68K_040 | CS_MODE_M68K_060),
164
  },
165
#else
166
  { NULL, NULL, 0 },
167
#endif
168
#ifdef CAPSTONE_HAS_TMS320C64X
169
  {
170
    TMS320C64x_global_init,
171
    TMS320C64x_option,
172
    ~(CS_MODE_LITTLE_ENDIAN | CS_MODE_BIG_ENDIAN),
173
  },
174
#else
175
  { NULL, NULL, 0 },
176
#endif
177
#ifdef CAPSTONE_HAS_M680X
178
  {
179
    M680X_global_init,
180
    M680X_option,
181
    ~(CS_MODE_M680X_6301 | CS_MODE_M680X_6309 | CS_MODE_M680X_6800
182
        | CS_MODE_M680X_6801 | CS_MODE_M680X_6805 | CS_MODE_M680X_6808
183
        | CS_MODE_M680X_6809 | CS_MODE_M680X_6811 | CS_MODE_M680X_CPU12
184
        | CS_MODE_M680X_HCS08),
185
  },
186
#else
187
  { NULL, NULL, 0 },
188
#endif
189
#ifdef CAPSTONE_HAS_EVM
190
  {
191
    EVM_global_init,
192
    EVM_option,
193
    0,
194
  },
195
#else
196
  { NULL, NULL, 0 },
197
#endif
198
#ifdef CAPSTONE_HAS_MOS65XX
199
  {
200
    MOS65XX_global_init,
201
    MOS65XX_option,
202
    ~(CS_MODE_LITTLE_ENDIAN | CS_MODE_MOS65XX_6502 | CS_MODE_MOS65XX_65C02
203
        | CS_MODE_MOS65XX_W65C02 | CS_MODE_MOS65XX_65816_LONG_MX),
204
  },
205
#else
206
  { NULL, NULL, 0 },
207
#endif
208
#ifdef CAPSTONE_HAS_WASM
209
  {
210
    WASM_global_init,
211
    WASM_option,
212
    0,
213
  },
214
#else
215
  { NULL, NULL, 0 },
216
#endif
217
#ifdef CAPSTONE_HAS_BPF
218
  {
219
    BPF_global_init,
220
    BPF_option,
221
    ~(CS_MODE_LITTLE_ENDIAN | CS_MODE_BPF_CLASSIC | CS_MODE_BPF_EXTENDED
222
        | CS_MODE_BIG_ENDIAN),
223
  },
224
#else
225
  { NULL, NULL, 0 },
226
#endif
227
#ifdef CAPSTONE_HAS_RISCV
228
  {
229
    RISCV_global_init,
230
    RISCV_option,
231
    ~(CS_MODE_RISCV32 | CS_MODE_RISCV64 | CS_MODE_RISCVC),
232
  },
233
#else
234
  { NULL, NULL, 0 },
235
#endif
236
#ifdef CAPSTONE_HAS_SH
237
  {
238
    SH_global_init,
239
    SH_option,
240
    ~(CS_MODE_SH2 | CS_MODE_SH2A | CS_MODE_SH3 |
241
      CS_MODE_SH4 | CS_MODE_SH4A |
242
      CS_MODE_SHFPU | CS_MODE_SHDSP|CS_MODE_BIG_ENDIAN),
243
  },
244
#else
245
  { NULL, NULL, 0 },
246
#endif
247
#ifdef CAPSTONE_HAS_TRICORE
248
  {
249
    TRICORE_global_init,
250
    TRICORE_option,
251
    ~(CS_MODE_TRICORE_110 | CS_MODE_TRICORE_120 | CS_MODE_TRICORE_130
252
    | CS_MODE_TRICORE_131 | CS_MODE_TRICORE_160 | CS_MODE_TRICORE_161
253
    | CS_MODE_TRICORE_162 | CS_MODE_LITTLE_ENDIAN),
254
  },
255
#else
256
  { NULL, NULL, 0 },
257
#endif
258
};
259
260
// bitmask of enabled architectures
261
static const uint32_t all_arch = 0
262
#ifdef CAPSTONE_HAS_ARM
263
  | (1 << CS_ARCH_ARM)
264
#endif
265
#ifdef CAPSTONE_HAS_ARM64
266
  | (1 << CS_ARCH_ARM64)
267
#endif
268
#ifdef CAPSTONE_HAS_MIPS
269
  | (1 << CS_ARCH_MIPS)
270
#endif
271
#ifdef CAPSTONE_HAS_X86
272
  | (1 << CS_ARCH_X86)
273
#endif
274
#ifdef CAPSTONE_HAS_POWERPC
275
  | (1 << CS_ARCH_PPC)
276
#endif
277
#ifdef CAPSTONE_HAS_SPARC
278
  | (1 << CS_ARCH_SPARC)
279
#endif
280
#ifdef CAPSTONE_HAS_SYSZ
281
  | (1 << CS_ARCH_SYSZ)
282
#endif
283
#ifdef CAPSTONE_HAS_XCORE
284
  | (1 << CS_ARCH_XCORE)
285
#endif
286
#ifdef CAPSTONE_HAS_M68K
287
  | (1 << CS_ARCH_M68K)
288
#endif
289
#ifdef CAPSTONE_HAS_TMS320C64X
290
  | (1 << CS_ARCH_TMS320C64X)
291
#endif
292
#ifdef CAPSTONE_HAS_M680X
293
  | (1 << CS_ARCH_M680X)
294
#endif
295
#ifdef CAPSTONE_HAS_EVM
296
  | (1 << CS_ARCH_EVM)
297
#endif
298
#ifdef CAPSTONE_HAS_MOS65XX
299
  | (1 << CS_ARCH_MOS65XX)
300
#endif
301
#ifdef CAPSTONE_HAS_WASM
302
  | (1 << CS_ARCH_WASM)
303
#endif
304
#ifdef CAPSTONE_HAS_BPF
305
  | (1 << CS_ARCH_BPF)
306
#endif
307
#ifdef CAPSTONE_HAS_RISCV
308
  | (1 << CS_ARCH_RISCV)
309
#endif
310
#ifdef CAPSTONE_HAS_SH
311
  | (1 << CS_ARCH_SH)
312
#endif
313
#ifdef CAPSTONE_HAS_TRICORE
314
  | (1 << CS_ARCH_TRICORE)
315
#endif
316
;
317
318
319
#if defined(CAPSTONE_USE_SYS_DYN_MEM)
320
#if !defined(CAPSTONE_HAS_OSXKERNEL) && !defined(_KERNEL_MODE)
321
// default
322
cs_malloc_t cs_mem_malloc = malloc;
323
cs_calloc_t cs_mem_calloc = calloc;
324
cs_realloc_t cs_mem_realloc = realloc;
325
cs_free_t cs_mem_free = free;
326
#if defined(_WIN32_WCE)
327
cs_vsnprintf_t cs_vsnprintf = _vsnprintf;
328
#else
329
cs_vsnprintf_t cs_vsnprintf = vsnprintf;
330
#endif  // defined(_WIN32_WCE)
331
332
#elif defined(_KERNEL_MODE)
333
// Windows driver
334
cs_malloc_t cs_mem_malloc = cs_winkernel_malloc;
335
cs_calloc_t cs_mem_calloc = cs_winkernel_calloc;
336
cs_realloc_t cs_mem_realloc = cs_winkernel_realloc;
337
cs_free_t cs_mem_free = cs_winkernel_free;
338
cs_vsnprintf_t cs_vsnprintf = cs_winkernel_vsnprintf;
339
#else
340
// OSX kernel
341
extern void* kern_os_malloc(size_t size);
342
extern void kern_os_free(void* addr);
343
extern void* kern_os_realloc(void* addr, size_t nsize);
344
345
static void* cs_kern_os_calloc(size_t num, size_t size)
346
{
347
  size_t alloc = num * size;
348
  if (num && size != alloc / num) {
349
    return NULL; // overflow check
350
  }
351
  return kern_os_malloc(alloc); // malloc bzeroes the buffer
352
}
353
354
cs_malloc_t cs_mem_malloc = kern_os_malloc;
355
cs_calloc_t cs_mem_calloc = cs_kern_os_calloc;
356
cs_realloc_t cs_mem_realloc = kern_os_realloc;
357
cs_free_t cs_mem_free = kern_os_free;
358
cs_vsnprintf_t cs_vsnprintf = vsnprintf;
359
#endif  // !defined(CAPSTONE_HAS_OSXKERNEL) && !defined(_KERNEL_MODE)
360
#else
361
// User-defined
362
cs_malloc_t cs_mem_malloc = NULL;
363
cs_calloc_t cs_mem_calloc = NULL;
364
cs_realloc_t cs_mem_realloc = NULL;
365
cs_free_t cs_mem_free = NULL;
366
cs_vsnprintf_t cs_vsnprintf = NULL;
367
368
#endif  // defined(CAPSTONE_USE_SYS_DYN_MEM)
369
370
CAPSTONE_EXPORT
371
unsigned int CAPSTONE_API cs_version(int *major, int *minor)
372
0
{
373
0
  if (major != NULL && minor != NULL) {
374
0
    *major = CS_API_MAJOR;
375
0
    *minor = CS_API_MINOR;
376
0
  }
377
378
0
  return (CS_API_MAJOR << 8) + CS_API_MINOR;
379
0
}
380
381
CAPSTONE_EXPORT
382
bool CAPSTONE_API cs_support(int query)
383
0
{
384
0
  if (query == CS_ARCH_ALL)
385
0
    return all_arch == ((1 << CS_ARCH_ARM)   | (1 << CS_ARCH_ARM64)      |
386
0
            (1 << CS_ARCH_MIPS)  | (1 << CS_ARCH_X86)        |
387
0
            (1 << CS_ARCH_PPC)   | (1 << CS_ARCH_SPARC)      |
388
0
            (1 << CS_ARCH_SYSZ)  | (1 << CS_ARCH_XCORE)      |
389
0
            (1 << CS_ARCH_M68K)  | (1 << CS_ARCH_TMS320C64X) |
390
0
            (1 << CS_ARCH_M680X) | (1 << CS_ARCH_EVM)        |
391
0
            (1 << CS_ARCH_RISCV) | (1 << CS_ARCH_MOS65XX)    |
392
0
            (1 << CS_ARCH_WASM)  | (1 << CS_ARCH_BPF)        |
393
0
            (1 << CS_ARCH_SH)    | (1 << CS_ARCH_TRICORE));
394
395
0
  if ((unsigned int)query < CS_ARCH_MAX)
396
0
    return all_arch & (1 << query);
397
398
0
  if (query == CS_SUPPORT_DIET) {
399
#ifdef CAPSTONE_DIET
400
    return true;
401
#else
402
0
    return false;
403
0
#endif
404
0
  }
405
406
0
  if (query == CS_SUPPORT_X86_REDUCE) {
407
#if defined(CAPSTONE_HAS_X86) && defined(CAPSTONE_X86_REDUCE)
408
    return true;
409
#else
410
0
    return false;
411
0
#endif
412
0
  }
413
414
  // unsupported query
415
0
  return false;
416
0
}
417
418
CAPSTONE_EXPORT
419
cs_err CAPSTONE_API cs_errno(csh handle)
420
0
{
421
0
  struct cs_struct *ud;
422
0
  if (!handle)
423
0
    return CS_ERR_CSH;
424
425
0
  ud = (struct cs_struct *)(uintptr_t)handle;
426
427
0
  return ud->errnum;
428
0
}
429
430
CAPSTONE_EXPORT
431
const char * CAPSTONE_API cs_strerror(cs_err code)
432
0
{
433
0
  switch(code) {
434
0
    default:
435
0
      return "Unknown error code";
436
0
    case CS_ERR_OK:
437
0
      return "OK (CS_ERR_OK)";
438
0
    case CS_ERR_MEM:
439
0
      return "Out of memory (CS_ERR_MEM)";
440
0
    case CS_ERR_ARCH:
441
0
      return "Invalid/unsupported architecture(CS_ERR_ARCH)";
442
0
    case CS_ERR_HANDLE:
443
0
      return "Invalid handle (CS_ERR_HANDLE)";
444
0
    case CS_ERR_CSH:
445
0
      return "Invalid csh (CS_ERR_CSH)";
446
0
    case CS_ERR_MODE:
447
0
      return "Invalid mode (CS_ERR_MODE)";
448
0
    case CS_ERR_OPTION:
449
0
      return "Invalid option (CS_ERR_OPTION)";
450
0
    case CS_ERR_DETAIL:
451
0
      return "Details are unavailable (CS_ERR_DETAIL)";
452
0
    case CS_ERR_MEMSETUP:
453
0
      return "Dynamic memory management uninitialized (CS_ERR_MEMSETUP)";
454
0
    case CS_ERR_VERSION:
455
0
      return "Different API version between core & binding (CS_ERR_VERSION)";
456
0
    case CS_ERR_DIET:
457
0
      return "Information irrelevant in diet engine (CS_ERR_DIET)";
458
0
    case CS_ERR_SKIPDATA:
459
0
      return "Information irrelevant for 'data' instruction in SKIPDATA mode (CS_ERR_SKIPDATA)";
460
0
    case CS_ERR_X86_ATT:
461
0
      return "AT&T syntax is unavailable (CS_ERR_X86_ATT)";
462
0
    case CS_ERR_X86_INTEL:
463
0
      return "INTEL syntax is unavailable (CS_ERR_X86_INTEL)";
464
0
    case CS_ERR_X86_MASM:
465
0
      return "MASM syntax is unavailable (CS_ERR_X86_MASM)";
466
0
  }
467
0
}
468
469
CAPSTONE_EXPORT
470
cs_err CAPSTONE_API cs_open(cs_arch arch, cs_mode mode, csh *handle)
471
37.1k
{
472
37.1k
  cs_err err;
473
37.1k
  struct cs_struct *ud;
474
37.1k
  if (!cs_mem_malloc || !cs_mem_calloc || !cs_mem_realloc || !cs_mem_free || !cs_vsnprintf)
475
    // Error: before cs_open(), dynamic memory management must be initialized
476
    // with cs_option(CS_OPT_MEM)
477
0
    return CS_ERR_MEMSETUP;
478
479
37.1k
  if (arch < CS_ARCH_MAX && arch_configs[arch].arch_init) {
480
    // verify if requested mode is valid
481
37.1k
    if (mode & arch_configs[arch].arch_disallowed_mode_mask) {
482
1
      *handle = 0;
483
1
      return CS_ERR_MODE;
484
1
    }
485
486
37.1k
    ud = cs_mem_calloc(1, sizeof(*ud));
487
37.1k
    if (!ud) {
488
      // memory insufficient
489
0
      return CS_ERR_MEM;
490
0
    }
491
492
37.1k
    ud->errnum = CS_ERR_OK;
493
37.1k
    ud->arch = arch;
494
37.1k
    ud->mode = mode;
495
    // by default, do not break instruction into details
496
37.1k
    ud->detail = CS_OPT_OFF;
497
498
    // default skipdata setup
499
37.1k
    ud->skipdata_setup.mnemonic = SKIPDATA_MNEM;
500
501
37.1k
    err = arch_configs[ud->arch].arch_init(ud);
502
37.1k
    if (err) {
503
0
      cs_mem_free(ud);
504
0
      *handle = 0;
505
0
      return err;
506
0
    }
507
508
37.1k
    *handle = (uintptr_t)ud;
509
510
37.1k
    return CS_ERR_OK;
511
37.1k
  } else {
512
0
    *handle = 0;
513
0
    return CS_ERR_ARCH;
514
0
  }
515
37.1k
}
516
517
CAPSTONE_EXPORT
518
cs_err CAPSTONE_API cs_close(csh *handle)
519
37.1k
{
520
37.1k
  struct cs_struct *ud;
521
37.1k
  struct insn_mnem *next, *tmp;
522
523
37.1k
  if (*handle == 0)
524
    // invalid handle
525
0
    return CS_ERR_CSH;
526
527
37.1k
  ud = (struct cs_struct *)(*handle);
528
529
37.1k
  if (ud->printer_info)
530
35.3k
    cs_mem_free(ud->printer_info);
531
532
  // free the linked list of customized mnemonic
533
37.1k
  tmp = ud->mnem_list;
534
37.1k
  while(tmp) {
535
0
    next = tmp->next;
536
0
    cs_mem_free(tmp);
537
0
    tmp = next;
538
0
  }
539
540
37.1k
  cs_mem_free(ud->insn_cache);
541
37.1k
  cs_mem_free(ud->x86_insn_lut);
542
37.1k
  cs_mem_free(ud->x86_insn_reg_lut);
543
544
37.1k
  memset(ud, 0, sizeof(*ud));
545
37.1k
  cs_mem_free(ud);
546
547
  // invalidate this handle by ZERO out its value.
548
  // this is to make sure it is unusable after cs_close()
549
37.1k
  *handle = 0;
550
551
37.1k
  return CS_ERR_OK;
552
37.1k
}
553
554
// replace str1 in target with str2; target starts with str1
555
// output is put into result (which is array of char with size CS_MNEMONIC_SIZE)
556
// return 0 on success, -1 on failure
557
static int str_replace(char *result, char *target, const char *str1, char *str2)
558
0
{
559
  // only perform replacement if the output fits into result
560
0
  if (strlen(target) - strlen(str1) + strlen(str2) < CS_MNEMONIC_SIZE - 1)  {
561
    // copy str2 to begining of result
562
0
    strcpy(result, str2);
563
    // skip str1 - already replaced by str2
564
0
    strcat(result, target + strlen(str1));
565
566
0
    return 0;
567
0
  } else
568
0
    return -1;
569
0
}
570
571
// fill insn with mnemonic & operands info
572
static void fill_insn(struct cs_struct *handle, cs_insn *insn, char *buffer, MCInst *mci,
573
    PostPrinter_t postprinter, const uint8_t *code)
574
2.17M
{
575
2.17M
#ifndef CAPSTONE_DIET
576
2.17M
  char *sp, *mnem;
577
2.17M
#endif
578
2.17M
  uint16_t copy_size = MIN(sizeof(insn->bytes), insn->size);
579
580
  // fill the instruction bytes.
581
  // we might skip some redundant bytes in front in the case of X86
582
2.17M
  memcpy(insn->bytes, code + insn->size - copy_size, copy_size);
583
2.17M
  insn->op_str[0] = '\0';
584
2.17M
  insn->size = copy_size;
585
586
  // alias instruction might have ID saved in OpcodePub
587
2.17M
  if (MCInst_getOpcodePub(mci))
588
147k
    insn->id = MCInst_getOpcodePub(mci);
589
590
  // post printer handles some corner cases (hacky)
591
2.17M
  if (postprinter)
592
1.60M
    postprinter((csh)handle, insn, buffer, mci);
593
594
2.17M
#ifndef CAPSTONE_DIET
595
2.17M
  mnem = insn->mnemonic;
596
  // memset(mnem, 0, CS_MNEMONIC_SIZE);
597
12.5M
  for (sp = buffer; *sp; sp++) {
598
12.4M
    if (*sp == ' '|| *sp == '\t')
599
2.07M
      break;
600
10.3M
    if (*sp == '|')  // lock|rep prefix for x86
601
70.5k
      *sp = ' ';
602
    // copy to @mnemonic
603
10.3M
    *mnem = *sp;
604
10.3M
    mnem++;
605
10.3M
  }
606
607
2.17M
  *mnem = '\0';
608
609
  // we might have customized mnemonic
610
2.17M
  if (handle->mnem_list) {
611
0
    struct insn_mnem *tmp = handle->mnem_list;
612
0
    while(tmp) {
613
0
      if (tmp->insn.id == insn->id) {
614
0
        char str[CS_MNEMONIC_SIZE];
615
616
0
        if (!str_replace(str, insn->mnemonic, cs_insn_name((csh)handle, insn->id), tmp->insn.mnemonic)) {
617
          // copy result to mnemonic
618
0
          (void)strncpy(insn->mnemonic, str, sizeof(insn->mnemonic) - 1);
619
0
          insn->mnemonic[sizeof(insn->mnemonic) - 1] = '\0';
620
0
        }
621
622
0
        break;
623
0
      }
624
0
      tmp = tmp->next;
625
0
    }
626
0
  }
627
628
  // copy @op_str
629
2.17M
  if (*sp) {
630
    // find the next non-space char
631
2.07M
    sp++;
632
2.07M
    for (; ((*sp == ' ') || (*sp == '\t')); sp++);
633
2.07M
    strncpy(insn->op_str, sp, sizeof(insn->op_str) - 1);
634
2.07M
    insn->op_str[sizeof(insn->op_str) - 1] = '\0';
635
2.07M
  } else
636
99.2k
    insn->op_str[0] = '\0';
637
638
2.17M
#endif
639
2.17M
}
640
641
// how many bytes will we skip when encountering data (CS_OPT_SKIPDATA)?
642
// this very much depends on instruction alignment requirement of each arch.
643
static uint8_t skipdata_size(cs_struct *handle)
644
0
{
645
0
  switch(handle->arch) {
646
0
    default:
647
      // should never reach
648
0
      return (uint8_t)-1;
649
0
    case CS_ARCH_ARM:
650
      // skip 2 bytes on Thumb mode.
651
0
      if (handle->mode & CS_MODE_THUMB)
652
0
        return 2;
653
      // otherwise, skip 4 bytes
654
0
      return 4;
655
0
    case CS_ARCH_ARM64:
656
0
    case CS_ARCH_MIPS:
657
0
    case CS_ARCH_PPC:
658
0
    case CS_ARCH_SPARC:
659
      // skip 4 bytes
660
0
      return 4;
661
0
    case CS_ARCH_SYSZ:
662
      // SystemZ instruction's length can be 2, 4 or 6 bytes,
663
      // so we just skip 2 bytes
664
0
      return 2;
665
0
    case CS_ARCH_X86:
666
      // X86 has no restriction on instruction alignment
667
0
      return 1;
668
0
    case CS_ARCH_XCORE:
669
      // XCore instruction's length can be 2 or 4 bytes,
670
      // so we just skip 2 bytes
671
0
      return 2;
672
0
    case CS_ARCH_M68K:
673
      // M68K has 2 bytes instruction alignment but contain multibyte instruction so we skip 2 bytes
674
0
      return 2;
675
0
    case CS_ARCH_TMS320C64X:
676
      // TMS320C64x alignment is 4.
677
0
      return 4;
678
0
    case CS_ARCH_M680X:
679
      // M680X alignment is 1.
680
0
      return 1;
681
0
    case CS_ARCH_EVM:
682
      // EVM alignment is 1.
683
0
      return 1;
684
0
    case CS_ARCH_WASM:
685
      //WASM alignment is 1
686
0
      return 1;
687
0
    case CS_ARCH_MOS65XX:
688
      // MOS65XX alignment is 1.
689
0
      return 1;
690
0
    case CS_ARCH_BPF:
691
      // both classic and extended BPF have alignment 8.
692
0
      return 8;
693
0
    case CS_ARCH_RISCV:
694
      // special compress mode
695
0
      if (handle->mode & CS_MODE_RISCVC)
696
0
        return 2;
697
0
      return 4;
698
0
    case CS_ARCH_SH:
699
0
      return 2;
700
0
    case CS_ARCH_TRICORE:
701
      // TriCore instruction's length can be 2 or 4 bytes,
702
      // so we just skip 2 bytes
703
0
      return 2;
704
0
  }
705
0
}
706
707
CAPSTONE_EXPORT
708
cs_err CAPSTONE_API cs_option(csh ud, cs_opt_type type, size_t value)
709
47.6k
{
710
47.6k
  struct cs_struct *handle;
711
47.6k
  cs_opt_mnem *opt;
712
713
  // cs_option() can be called with NULL handle just for CS_OPT_MEM
714
  // This is supposed to be executed before all other APIs (even cs_open())
715
47.6k
  if (type == CS_OPT_MEM) {
716
0
    cs_opt_mem *mem = (cs_opt_mem *)value;
717
718
0
    cs_mem_malloc = mem->malloc;
719
0
    cs_mem_calloc = mem->calloc;
720
0
    cs_mem_realloc = mem->realloc;
721
0
    cs_mem_free = mem->free;
722
0
    cs_vsnprintf = mem->vsnprintf;
723
724
0
    return CS_ERR_OK;
725
0
  }
726
727
47.6k
  handle = (struct cs_struct *)(uintptr_t)ud;
728
47.6k
  if (!handle)
729
0
    return CS_ERR_CSH;
730
731
47.6k
  switch(type) {
732
10.5k
    default:
733
10.5k
      break;
734
735
10.5k
    case CS_OPT_UNSIGNED:
736
0
      handle->imm_unsigned = (cs_opt_value)value;
737
0
      return CS_ERR_OK;
738
739
37.1k
    case CS_OPT_DETAIL:
740
37.1k
      handle->detail = (cs_opt_value)value;
741
37.1k
      return CS_ERR_OK;
742
743
0
    case CS_OPT_SKIPDATA:
744
0
      handle->skipdata = (value == CS_OPT_ON);
745
0
      if (handle->skipdata) {
746
0
        if (handle->skipdata_size == 0) {
747
          // set the default skipdata size
748
0
          handle->skipdata_size = skipdata_size(handle);
749
0
        }
750
0
      }
751
0
      return CS_ERR_OK;
752
753
0
    case CS_OPT_SKIPDATA_SETUP:
754
0
      if (value) {
755
0
        handle->skipdata_setup = *((cs_opt_skipdata *)value);
756
0
        if (handle->skipdata_setup.mnemonic == NULL) {
757
0
          handle->skipdata_setup.mnemonic = SKIPDATA_MNEM;
758
0
        }
759
0
      }
760
0
      return CS_ERR_OK;
761
762
0
    case CS_OPT_MNEMONIC:
763
0
      opt = (cs_opt_mnem *)value;
764
0
      if (opt->id) {
765
0
        if (opt->mnemonic) {
766
0
          struct insn_mnem *tmp;
767
768
          // add new instruction, or replace existing instruction
769
          // 1. find if we already had this insn in the linked list
770
0
          tmp = handle->mnem_list;
771
0
          while(tmp) {
772
0
            if (tmp->insn.id == opt->id) {
773
              // found this instruction, so replace its mnemonic
774
0
              (void)strncpy(tmp->insn.mnemonic, opt->mnemonic, sizeof(tmp->insn.mnemonic) - 1);
775
0
              tmp->insn.mnemonic[sizeof(tmp->insn.mnemonic) - 1] = '\0';
776
0
              break;
777
0
            }
778
0
            tmp = tmp->next;
779
0
          }
780
781
          // 2. add this instruction if we have not had it yet
782
0
          if (!tmp) {
783
0
            tmp = cs_mem_malloc(sizeof(*tmp));
784
0
            tmp->insn.id = opt->id;
785
0
            (void)strncpy(tmp->insn.mnemonic, opt->mnemonic, sizeof(tmp->insn.mnemonic) - 1);
786
0
            tmp->insn.mnemonic[sizeof(tmp->insn.mnemonic) - 1] = '\0';
787
            // this new instruction is heading the list
788
0
            tmp->next = handle->mnem_list;
789
0
            handle->mnem_list = tmp;
790
0
          }
791
0
          return CS_ERR_OK;
792
0
        } else {
793
0
          struct insn_mnem *prev, *tmp;
794
795
          // we want to delete an existing instruction
796
          // iterate the list to find the instruction to remove it
797
0
          tmp = handle->mnem_list;
798
0
          prev = tmp;
799
0
          while(tmp) {
800
0
            if (tmp->insn.id == opt->id) {
801
              // delete this instruction
802
0
              if (tmp == prev) {
803
                // head of the list
804
0
                handle->mnem_list = tmp->next;
805
0
              } else {
806
0
                prev->next = tmp->next;
807
0
              }
808
0
              cs_mem_free(tmp);
809
0
              break;
810
0
            }
811
0
            prev = tmp;
812
0
            tmp = tmp->next;
813
0
          }
814
0
        }
815
0
      }
816
0
      return CS_ERR_OK;
817
818
0
    case CS_OPT_MODE:
819
      // verify if requested mode is valid
820
0
      if (value & arch_configs[handle->arch].arch_disallowed_mode_mask) {
821
0
        return CS_ERR_OPTION;
822
0
      }
823
0
      break;
824
47.6k
  }
825
826
10.5k
  return arch_configs[handle->arch].arch_option(handle, type, value);
827
47.6k
}
828
829
// generate @op_str for data instruction of SKIPDATA
830
#ifndef CAPSTONE_DIET
831
static void skipdata_opstr(char *opstr, const uint8_t *buffer, size_t size)
832
0
{
833
0
  char *p = opstr;
834
0
  int len;
835
0
  size_t i;
836
0
  size_t available = sizeof(((cs_insn*)NULL)->op_str);
837
838
0
  if (!size) {
839
0
    opstr[0] = '\0';
840
0
    return;
841
0
  }
842
843
0
  len = cs_snprintf(p, available, "0x%02x", buffer[0]);
844
0
  p+= len;
845
0
  available -= len;
846
847
0
  for(i = 1; i < size; i++) {
848
0
    len = cs_snprintf(p, available, ", 0x%02x", buffer[i]);
849
0
    if (len < 0) {
850
0
      break;
851
0
    }
852
0
    if ((size_t)len > available - 1) {
853
0
      break;
854
0
    }
855
0
    p+= len;
856
0
    available -= len;
857
0
  }
858
0
}
859
#endif
860
861
// dynamicly allocate memory to contain disasm insn
862
// NOTE: caller must free() the allocated memory itself to avoid memory leaking
863
CAPSTONE_EXPORT
864
size_t CAPSTONE_API cs_disasm(csh ud, const uint8_t *buffer, size_t size, uint64_t offset, size_t count, cs_insn **insn)
865
37.1k
{
866
37.1k
  struct cs_struct *handle;
867
37.1k
  MCInst mci;
868
37.1k
  uint16_t insn_size;
869
37.1k
  size_t c = 0, i;
870
37.1k
  unsigned int f = 0; // index of the next instruction in the cache
871
37.1k
  cs_insn *insn_cache;  // cache contains disassembled instructions
872
37.1k
  void *total = NULL;
873
37.1k
  size_t total_size = 0;  // total size of output buffer containing all insns
874
37.1k
  bool r;
875
37.1k
  void *tmp;
876
37.1k
  size_t skipdata_bytes;
877
37.1k
  uint64_t offset_org; // save all the original info of the buffer
878
37.1k
  size_t size_org;
879
37.1k
  const uint8_t *buffer_org;
880
37.1k
  unsigned int cache_size = INSN_CACHE_SIZE;
881
37.1k
  size_t next_offset;
882
883
37.1k
  handle = (struct cs_struct *)(uintptr_t)ud;
884
37.1k
  if (!handle) {
885
    // FIXME: how to handle this case:
886
    // handle->errnum = CS_ERR_HANDLE;
887
0
    return 0;
888
0
  }
889
890
37.1k
  handle->errnum = CS_ERR_OK;
891
892
  // reset IT block of ARM structure
893
37.1k
  if (handle->arch == CS_ARCH_ARM)
894
6.89k
    handle->ITBlock.size = 0;
895
896
37.1k
#ifdef CAPSTONE_USE_SYS_DYN_MEM
897
37.1k
  if (count > 0 && count <= INSN_CACHE_SIZE)
898
0
    cache_size = (unsigned int) count;
899
37.1k
#endif
900
901
  // save the original offset for SKIPDATA
902
37.1k
  buffer_org = buffer;
903
37.1k
  offset_org = offset;
904
37.1k
  size_org = size;
905
906
37.1k
  total_size = sizeof(cs_insn) * cache_size;
907
37.1k
  total = cs_mem_calloc(sizeof(cs_insn), cache_size);
908
37.1k
  if (total == NULL) {
909
    // insufficient memory
910
0
    handle->errnum = CS_ERR_MEM;
911
0
    return 0;
912
0
  }
913
914
37.1k
  insn_cache = total;
915
916
2.21M
  while (size > 0) {
917
2.19M
    MCInst_Init(&mci);
918
2.19M
    mci.csh = handle;
919
920
    // relative branches need to know the address & size of current insn
921
2.19M
    mci.address = offset;
922
923
2.19M
    if (handle->detail) {
924
      // allocate memory for @detail pointer
925
2.19M
      insn_cache->detail = cs_mem_malloc(sizeof(cs_detail));
926
2.19M
    } else {
927
0
      insn_cache->detail = NULL;
928
0
    }
929
930
    // save all the information for non-detailed mode
931
2.19M
    mci.flat_insn = insn_cache;
932
2.19M
    mci.flat_insn->address = offset;
933
#ifdef CAPSTONE_DIET
934
    // zero out mnemonic & op_str
935
    mci.flat_insn->mnemonic[0] = '\0';
936
    mci.flat_insn->op_str[0] = '\0';
937
#endif
938
939
2.19M
    r = handle->disasm(ud, buffer, size, &mci, &insn_size, offset, handle->getinsn_info);
940
2.19M
    if (r) {
941
2.17M
      SStream ss;
942
2.17M
      SStream_Init(&ss);
943
944
2.17M
      mci.flat_insn->size = insn_size;
945
946
      // map internal instruction opcode to public insn ID
947
948
2.17M
      handle->insn_id(handle, insn_cache, mci.Opcode);
949
950
2.17M
      handle->printer(&mci, &ss, handle->printer_info);
951
2.17M
      fill_insn(handle, insn_cache, ss.buffer, &mci, handle->post_printer, buffer);
952
953
      // adjust for pseudo opcode (X86)
954
2.17M
      if (handle->arch == CS_ARCH_X86 && insn_cache->id != X86_INS_VCMP)
955
515k
        insn_cache->id += mci.popcode_adjust;
956
957
2.17M
      next_offset = insn_size;
958
2.17M
    } else {
959
      // encounter a broken instruction
960
961
      // free memory of @detail pointer
962
18.6k
      if (handle->detail) {
963
18.6k
        cs_mem_free(insn_cache->detail);
964
18.6k
      }
965
966
      // if there is no request to skip data, or remaining data is too small,
967
      // then bail out
968
18.6k
      if (!handle->skipdata || handle->skipdata_size > size)
969
18.6k
        break;
970
971
0
      if (handle->skipdata_setup.callback) {
972
0
        skipdata_bytes = handle->skipdata_setup.callback(buffer_org, size_org,
973
0
            (size_t)(offset - offset_org), handle->skipdata_setup.user_data);
974
0
        if (skipdata_bytes > size)
975
          // remaining data is not enough
976
0
          break;
977
978
0
        if (!skipdata_bytes)
979
          // user requested not to skip data, so bail out
980
0
          break;
981
0
      } else
982
0
        skipdata_bytes = handle->skipdata_size;
983
984
      // we have to skip some amount of data, depending on arch & mode
985
      // invalid ID for this "data" instruction
986
0
      insn_cache->id = 0;
987
0
      insn_cache->address = offset;
988
0
      insn_cache->size = (uint16_t)MIN(
989
0
        skipdata_bytes, sizeof(insn_cache->bytes));
990
0
      memcpy(insn_cache->bytes, buffer,
991
0
             MIN(skipdata_bytes, sizeof(insn_cache->bytes)));
992
#ifdef CAPSTONE_DIET
993
      insn_cache->mnemonic[0] = '\0';
994
      insn_cache->op_str[0] = '\0';
995
#else
996
0
      strncpy(insn_cache->mnemonic, handle->skipdata_setup.mnemonic,
997
0
          sizeof(insn_cache->mnemonic) - 1);
998
0
      skipdata_opstr(insn_cache->op_str, buffer, skipdata_bytes);
999
0
#endif
1000
0
      insn_cache->detail = NULL;
1001
1002
0
      next_offset = skipdata_bytes;
1003
0
    }
1004
1005
    // one more instruction entering the cache
1006
2.17M
    f++;
1007
1008
    // one more instruction disassembled
1009
2.17M
    c++;
1010
2.17M
    if (count > 0 && c == count)
1011
      // already got requested number of instructions
1012
0
      break;
1013
1014
2.17M
    if (f == cache_size) {
1015
      // full cache, so expand the cache to contain incoming insns
1016
22.1k
      cache_size = cache_size * 8 / 5; // * 1.6 ~ golden ratio
1017
22.1k
      total_size += (sizeof(cs_insn) * cache_size);
1018
22.1k
      tmp = cs_mem_realloc(total, total_size);
1019
22.1k
      if (tmp == NULL) { // insufficient memory
1020
0
        if (handle->detail) {
1021
0
          insn_cache = (cs_insn *)total;
1022
0
          for (i = 0; i < c; i++, insn_cache++)
1023
0
            cs_mem_free(insn_cache->detail);
1024
0
        }
1025
1026
0
        cs_mem_free(total);
1027
0
        *insn = NULL;
1028
0
        handle->errnum = CS_ERR_MEM;
1029
0
        return 0;
1030
0
      }
1031
1032
22.1k
      total = tmp;
1033
      // continue to fill in the cache after the last instruction
1034
22.1k
      insn_cache = (cs_insn *)((char *)total + sizeof(cs_insn) * c);
1035
1036
      // reset f back to 0, so we fill in the cache from begining
1037
22.1k
      f = 0;
1038
22.1k
    } else
1039
2.15M
      insn_cache++;
1040
1041
2.17M
    buffer += next_offset;
1042
2.17M
    size -= next_offset;
1043
2.17M
    offset += next_offset;
1044
2.17M
  }
1045
1046
37.1k
  if (!c) {
1047
    // we did not disassemble any instruction
1048
874
    cs_mem_free(total);
1049
874
    total = NULL;
1050
36.2k
  } else if (f != cache_size) {
1051
    // total did not fully use the last cache, so downsize it
1052
36.2k
    tmp = cs_mem_realloc(total, total_size - (cache_size - f) * sizeof(*insn_cache));
1053
36.2k
    if (tmp == NULL) { // insufficient memory
1054
      // free all detail pointers
1055
0
      if (handle->detail) {
1056
0
        insn_cache = (cs_insn *)total;
1057
0
        for (i = 0; i < c; i++, insn_cache++)
1058
0
          cs_mem_free(insn_cache->detail);
1059
0
      }
1060
1061
0
      cs_mem_free(total);
1062
0
      *insn = NULL;
1063
1064
0
      handle->errnum = CS_ERR_MEM;
1065
0
      return 0;
1066
0
    }
1067
1068
36.2k
    total = tmp;
1069
36.2k
  }
1070
1071
37.1k
  *insn = total;
1072
1073
37.1k
  return c;
1074
37.1k
}
1075
1076
CAPSTONE_EXPORT
1077
void CAPSTONE_API cs_free(cs_insn *insn, size_t count)
1078
36.2k
{
1079
36.2k
  size_t i;
1080
1081
  // free all detail pointers
1082
2.21M
  for (i = 0; i < count; i++)
1083
2.17M
    cs_mem_free(insn[i].detail);
1084
1085
  // then free pointer to cs_insn array
1086
36.2k
  cs_mem_free(insn);
1087
36.2k
}
1088
1089
CAPSTONE_EXPORT
1090
cs_insn * CAPSTONE_API cs_malloc(csh ud)
1091
0
{
1092
0
  cs_insn *insn;
1093
0
  struct cs_struct *handle = (struct cs_struct *)(uintptr_t)ud;
1094
1095
0
  insn = cs_mem_malloc(sizeof(cs_insn));
1096
0
  if (!insn) {
1097
    // insufficient memory
1098
0
    handle->errnum = CS_ERR_MEM;
1099
0
    return NULL;
1100
0
  } else {
1101
0
    if (handle->detail) {
1102
      // allocate memory for @detail pointer
1103
0
      insn->detail = cs_mem_malloc(sizeof(cs_detail));
1104
0
      if (insn->detail == NULL) { // insufficient memory
1105
0
        cs_mem_free(insn);
1106
0
        handle->errnum = CS_ERR_MEM;
1107
0
        return NULL;
1108
0
      }
1109
0
    } else
1110
0
      insn->detail = NULL;
1111
0
  }
1112
1113
0
  return insn;
1114
0
}
1115
1116
// iterator for instruction "single-stepping"
1117
CAPSTONE_EXPORT
1118
bool CAPSTONE_API cs_disasm_iter(csh ud, const uint8_t **code, size_t *size,
1119
    uint64_t *address, cs_insn *insn)
1120
0
{
1121
0
  if (*size == 0)
1122
0
    return false;
1123
1124
0
  struct cs_struct *handle;
1125
0
  uint16_t insn_size;
1126
0
  MCInst mci;
1127
0
  bool r;
1128
1129
0
  handle = (struct cs_struct *)(uintptr_t)ud;
1130
0
  if (!handle) {
1131
0
    return false;
1132
0
  }
1133
1134
0
  handle->errnum = CS_ERR_OK;
1135
1136
0
  MCInst_Init(&mci);
1137
0
  mci.csh = handle;
1138
1139
  // relative branches need to know the address & size of current insn
1140
0
  mci.address = *address;
1141
1142
  // save all the information for non-detailed mode
1143
0
  mci.flat_insn = insn;
1144
0
  mci.flat_insn->address = *address;
1145
#ifdef CAPSTONE_DIET
1146
  // zero out mnemonic & op_str
1147
  mci.flat_insn->mnemonic[0] = '\0';
1148
  mci.flat_insn->op_str[0] = '\0';
1149
#endif
1150
1151
0
  r = handle->disasm(ud, *code, *size, &mci, &insn_size, *address, handle->getinsn_info);
1152
0
  if (r) {
1153
0
    SStream ss;
1154
0
    SStream_Init(&ss);
1155
1156
0
    mci.flat_insn->size = insn_size;
1157
1158
    // map internal instruction opcode to public insn ID
1159
0
    handle->insn_id(handle, insn, mci.Opcode);
1160
1161
0
    handle->printer(&mci, &ss, handle->printer_info);
1162
1163
0
    fill_insn(handle, insn, ss.buffer, &mci, handle->post_printer, *code);
1164
1165
    // adjust for pseudo opcode (X86)
1166
0
    if (handle->arch == CS_ARCH_X86)
1167
0
      insn->id += mci.popcode_adjust;
1168
1169
0
    *code += insn_size;
1170
0
    *size -= insn_size;
1171
0
    *address += insn_size;
1172
0
  } else {   // encounter a broken instruction
1173
0
    size_t skipdata_bytes;
1174
1175
    // if there is no request to skip data, or remaining data is too small,
1176
    // then bail out
1177
0
    if (!handle->skipdata || handle->skipdata_size > *size)
1178
0
      return false;
1179
1180
0
    if (handle->skipdata_setup.callback) {
1181
0
      skipdata_bytes = handle->skipdata_setup.callback(*code, *size,
1182
0
          0, handle->skipdata_setup.user_data);
1183
0
      if (skipdata_bytes > *size)
1184
        // remaining data is not enough
1185
0
        return false;
1186
1187
0
      if (!skipdata_bytes)
1188
        // user requested not to skip data, so bail out
1189
0
        return false;
1190
0
    } else
1191
0
      skipdata_bytes = handle->skipdata_size;
1192
1193
    // we have to skip some amount of data, depending on arch & mode
1194
0
    insn->id = 0; // invalid ID for this "data" instruction
1195
0
    insn->address = *address;
1196
0
    insn->size = (uint16_t)MIN(skipdata_bytes, sizeof(insn->bytes));
1197
0
    memcpy(insn->bytes, *code,
1198
0
           MIN(skipdata_bytes, sizeof(insn->bytes)));
1199
#ifdef CAPSTONE_DIET
1200
    insn->mnemonic[0] = '\0';
1201
    insn->op_str[0] = '\0';
1202
#else
1203
0
    strncpy(insn->mnemonic, handle->skipdata_setup.mnemonic,
1204
0
        sizeof(insn->mnemonic) - 1);
1205
0
    skipdata_opstr(insn->op_str, *code, skipdata_bytes);
1206
0
#endif
1207
1208
0
    *code += skipdata_bytes;
1209
0
    *size -= skipdata_bytes;
1210
0
    *address += skipdata_bytes;
1211
0
  }
1212
1213
0
  return true;
1214
0
}
1215
1216
// return friendly name of register in a string
1217
CAPSTONE_EXPORT
1218
const char * CAPSTONE_API cs_reg_name(csh ud, unsigned int reg)
1219
1.66M
{
1220
1.66M
  struct cs_struct *handle = (struct cs_struct *)(uintptr_t)ud;
1221
1222
1.66M
  if (!handle || handle->reg_name == NULL) {
1223
0
    return NULL;
1224
0
  }
1225
1226
1.66M
  return handle->reg_name(ud, reg);
1227
1.66M
}
1228
1229
CAPSTONE_EXPORT
1230
const char * CAPSTONE_API cs_insn_name(csh ud, unsigned int insn)
1231
2.17M
{
1232
2.17M
  struct cs_struct *handle = (struct cs_struct *)(uintptr_t)ud;
1233
1234
2.17M
  if (!handle || handle->insn_name == NULL) {
1235
0
    return NULL;
1236
0
  }
1237
1238
2.17M
  return handle->insn_name(ud, insn);
1239
2.17M
}
1240
1241
CAPSTONE_EXPORT
1242
const char * CAPSTONE_API cs_group_name(csh ud, unsigned int group)
1243
1.78M
{
1244
1.78M
  struct cs_struct *handle = (struct cs_struct *)(uintptr_t)ud;
1245
1246
1.78M
  if (!handle || handle->group_name == NULL) {
1247
0
    return NULL;
1248
0
  }
1249
1250
1.78M
  return handle->group_name(ud, group);
1251
1.78M
}
1252
1253
CAPSTONE_EXPORT
1254
bool CAPSTONE_API cs_insn_group(csh ud, const cs_insn *insn, unsigned int group_id)
1255
0
{
1256
0
  struct cs_struct *handle;
1257
0
  if (!ud)
1258
0
    return false;
1259
1260
0
  handle = (struct cs_struct *)(uintptr_t)ud;
1261
1262
0
  if (!handle->detail) {
1263
0
    handle->errnum = CS_ERR_DETAIL;
1264
0
    return false;
1265
0
  }
1266
1267
0
  if (!insn->id) {
1268
0
    handle->errnum = CS_ERR_SKIPDATA;
1269
0
    return false;
1270
0
  }
1271
1272
0
  if (!insn->detail) {
1273
0
    handle->errnum = CS_ERR_DETAIL;
1274
0
    return false;
1275
0
  }
1276
1277
0
  return arr_exist8(insn->detail->groups, insn->detail->groups_count, group_id);
1278
0
}
1279
1280
CAPSTONE_EXPORT
1281
bool CAPSTONE_API cs_reg_read(csh ud, const cs_insn *insn, unsigned int reg_id)
1282
0
{
1283
0
  struct cs_struct *handle;
1284
0
  if (!ud)
1285
0
    return false;
1286
1287
0
  handle = (struct cs_struct *)(uintptr_t)ud;
1288
1289
0
  if (!handle->detail) {
1290
0
    handle->errnum = CS_ERR_DETAIL;
1291
0
    return false;
1292
0
  }
1293
1294
0
  if (!insn->id) {
1295
0
    handle->errnum = CS_ERR_SKIPDATA;
1296
0
    return false;
1297
0
  }
1298
1299
0
  if (!insn->detail) {
1300
0
    handle->errnum = CS_ERR_DETAIL;
1301
0
    return false;
1302
0
  }
1303
1304
0
  return arr_exist(insn->detail->regs_read, insn->detail->regs_read_count, reg_id);
1305
0
}
1306
1307
CAPSTONE_EXPORT
1308
bool CAPSTONE_API cs_reg_write(csh ud, const cs_insn *insn, unsigned int reg_id)
1309
896k
{
1310
896k
  struct cs_struct *handle;
1311
896k
  if (!ud)
1312
0
    return false;
1313
1314
896k
  handle = (struct cs_struct *)(uintptr_t)ud;
1315
1316
896k
  if (!handle->detail) {
1317
0
    handle->errnum = CS_ERR_DETAIL;
1318
0
    return false;
1319
0
  }
1320
1321
896k
  if (!insn->id) {
1322
0
    handle->errnum = CS_ERR_SKIPDATA;
1323
0
    return false;
1324
0
  }
1325
1326
896k
  if (!insn->detail) {
1327
0
    handle->errnum = CS_ERR_DETAIL;
1328
0
    return false;
1329
0
  }
1330
1331
896k
  return arr_exist(insn->detail->regs_write, insn->detail->regs_write_count, reg_id);
1332
896k
}
1333
1334
CAPSTONE_EXPORT
1335
int CAPSTONE_API cs_op_count(csh ud, const cs_insn *insn, unsigned int op_type)
1336
0
{
1337
0
  struct cs_struct *handle;
1338
0
  unsigned int count = 0, i;
1339
0
  if (!ud)
1340
0
    return -1;
1341
1342
0
  handle = (struct cs_struct *)(uintptr_t)ud;
1343
1344
0
  if (!handle->detail) {
1345
0
    handle->errnum = CS_ERR_DETAIL;
1346
0
    return -1;
1347
0
  }
1348
1349
0
  if (!insn->id) {
1350
0
    handle->errnum = CS_ERR_SKIPDATA;
1351
0
    return -1;
1352
0
  }
1353
1354
0
  if (!insn->detail) {
1355
0
    handle->errnum = CS_ERR_DETAIL;
1356
0
    return -1;
1357
0
  }
1358
1359
0
  handle->errnum = CS_ERR_OK;
1360
1361
0
  switch (handle->arch) {
1362
0
    default:
1363
0
      handle->errnum = CS_ERR_HANDLE;
1364
0
      return -1;
1365
0
    case CS_ARCH_ARM:
1366
0
      for (i = 0; i < insn->detail->arm.op_count; i++)
1367
0
        if (insn->detail->arm.operands[i].type == (arm_op_type)op_type)
1368
0
          count++;
1369
0
      break;
1370
0
    case CS_ARCH_ARM64:
1371
0
      for (i = 0; i < insn->detail->arm64.op_count; i++)
1372
0
        if (insn->detail->arm64.operands[i].type == (arm64_op_type)op_type)
1373
0
          count++;
1374
0
      break;
1375
0
    case CS_ARCH_X86:
1376
0
      for (i = 0; i < insn->detail->x86.op_count; i++)
1377
0
        if (insn->detail->x86.operands[i].type == (x86_op_type)op_type)
1378
0
          count++;
1379
0
      break;
1380
0
    case CS_ARCH_MIPS:
1381
0
      for (i = 0; i < insn->detail->mips.op_count; i++)
1382
0
        if (insn->detail->mips.operands[i].type == (mips_op_type)op_type)
1383
0
          count++;
1384
0
      break;
1385
0
    case CS_ARCH_PPC:
1386
0
      for (i = 0; i < insn->detail->ppc.op_count; i++)
1387
0
        if (insn->detail->ppc.operands[i].type == (ppc_op_type)op_type)
1388
0
          count++;
1389
0
      break;
1390
0
    case CS_ARCH_SPARC:
1391
0
      for (i = 0; i < insn->detail->sparc.op_count; i++)
1392
0
        if (insn->detail->sparc.operands[i].type == (sparc_op_type)op_type)
1393
0
          count++;
1394
0
      break;
1395
0
    case CS_ARCH_SYSZ:
1396
0
      for (i = 0; i < insn->detail->sysz.op_count; i++)
1397
0
        if (insn->detail->sysz.operands[i].type == (sysz_op_type)op_type)
1398
0
          count++;
1399
0
      break;
1400
0
    case CS_ARCH_XCORE:
1401
0
      for (i = 0; i < insn->detail->xcore.op_count; i++)
1402
0
        if (insn->detail->xcore.operands[i].type == (xcore_op_type)op_type)
1403
0
          count++;
1404
0
      break;
1405
0
    case CS_ARCH_M68K:
1406
0
      for (i = 0; i < insn->detail->m68k.op_count; i++)
1407
0
        if (insn->detail->m68k.operands[i].type == (m68k_op_type)op_type)
1408
0
          count++;
1409
0
      break;
1410
0
    case CS_ARCH_TMS320C64X:
1411
0
      for (i = 0; i < insn->detail->tms320c64x.op_count; i++)
1412
0
        if (insn->detail->tms320c64x.operands[i].type == (tms320c64x_op_type)op_type)
1413
0
          count++;
1414
0
      break;
1415
0
    case CS_ARCH_M680X:
1416
0
      for (i = 0; i < insn->detail->m680x.op_count; i++)
1417
0
        if (insn->detail->m680x.operands[i].type == (m680x_op_type)op_type)
1418
0
          count++;
1419
0
      break;
1420
0
    case CS_ARCH_EVM:
1421
0
      break;
1422
0
    case CS_ARCH_MOS65XX:
1423
0
      for (i = 0; i < insn->detail->mos65xx.op_count; i++)
1424
0
        if (insn->detail->mos65xx.operands[i].type == (mos65xx_op_type)op_type)
1425
0
          count++;
1426
0
      break;
1427
0
    case CS_ARCH_WASM:
1428
0
      for (i = 0; i < insn->detail->wasm.op_count; i++)
1429
0
        if (insn->detail->wasm.operands[i].type == (wasm_op_type)op_type)
1430
0
          count++;
1431
0
      break;
1432
0
    case CS_ARCH_BPF:
1433
0
      for (i = 0; i < insn->detail->bpf.op_count; i++)
1434
0
        if (insn->detail->bpf.operands[i].type == (bpf_op_type)op_type)
1435
0
          count++;
1436
0
      break;
1437
0
    case CS_ARCH_RISCV:
1438
0
      for (i = 0; i < insn->detail->riscv.op_count; i++)
1439
0
        if (insn->detail->riscv.operands[i].type == (riscv_op_type)op_type)
1440
0
          count++;
1441
0
      break;
1442
0
    case CS_ARCH_TRICORE:
1443
0
      for (i = 0; i < insn->detail->tricore.op_count; i++)
1444
0
        if (insn->detail->tricore.operands[i].type == (tricore_op_type)op_type)
1445
0
          count++;
1446
0
      break;
1447
0
  }
1448
1449
0
  return count;
1450
0
}
1451
1452
CAPSTONE_EXPORT
1453
int CAPSTONE_API cs_op_index(csh ud, const cs_insn *insn, unsigned int op_type,
1454
    unsigned int post)
1455
0
{
1456
0
  struct cs_struct *handle;
1457
0
  unsigned int count = 0, i;
1458
0
  if (!ud)
1459
0
    return -1;
1460
1461
0
  handle = (struct cs_struct *)(uintptr_t)ud;
1462
1463
0
  if (!handle->detail) {
1464
0
    handle->errnum = CS_ERR_DETAIL;
1465
0
    return -1;
1466
0
  }
1467
1468
0
  if (!insn->id) {
1469
0
    handle->errnum = CS_ERR_SKIPDATA;
1470
0
    return -1;
1471
0
  }
1472
1473
0
  if (!insn->detail) {
1474
0
    handle->errnum = CS_ERR_DETAIL;
1475
0
    return -1;
1476
0
  }
1477
1478
0
  handle->errnum = CS_ERR_OK;
1479
1480
0
  switch (handle->arch) {
1481
0
    default:
1482
0
      handle->errnum = CS_ERR_HANDLE;
1483
0
      return -1;
1484
0
    case CS_ARCH_ARM:
1485
0
      for (i = 0; i < insn->detail->arm.op_count; i++) {
1486
0
        if (insn->detail->arm.operands[i].type == (arm_op_type)op_type)
1487
0
          count++;
1488
0
        if (count == post)
1489
0
          return i;
1490
0
      }
1491
0
      break;
1492
0
    case CS_ARCH_ARM64:
1493
0
      for (i = 0; i < insn->detail->arm64.op_count; i++) {
1494
0
        if (insn->detail->arm64.operands[i].type == (arm64_op_type)op_type)
1495
0
          count++;
1496
0
        if (count == post)
1497
0
          return i;
1498
0
      }
1499
0
      break;
1500
0
    case CS_ARCH_X86:
1501
0
      for (i = 0; i < insn->detail->x86.op_count; i++) {
1502
0
        if (insn->detail->x86.operands[i].type == (x86_op_type)op_type)
1503
0
          count++;
1504
0
        if (count == post)
1505
0
          return i;
1506
0
      }
1507
0
      break;
1508
0
    case CS_ARCH_MIPS:
1509
0
      for (i = 0; i < insn->detail->mips.op_count; i++) {
1510
0
        if (insn->detail->mips.operands[i].type == (mips_op_type)op_type)
1511
0
          count++;
1512
0
        if (count == post)
1513
0
          return i;
1514
0
      }
1515
0
      break;
1516
0
    case CS_ARCH_PPC:
1517
0
      for (i = 0; i < insn->detail->ppc.op_count; i++) {
1518
0
        if (insn->detail->ppc.operands[i].type == (ppc_op_type)op_type)
1519
0
          count++;
1520
0
        if (count == post)
1521
0
          return i;
1522
0
      }
1523
0
      break;
1524
0
    case CS_ARCH_SPARC:
1525
0
      for (i = 0; i < insn->detail->sparc.op_count; i++) {
1526
0
        if (insn->detail->sparc.operands[i].type == (sparc_op_type)op_type)
1527
0
          count++;
1528
0
        if (count == post)
1529
0
          return i;
1530
0
      }
1531
0
      break;
1532
0
    case CS_ARCH_SYSZ:
1533
0
      for (i = 0; i < insn->detail->sysz.op_count; i++) {
1534
0
        if (insn->detail->sysz.operands[i].type == (sysz_op_type)op_type)
1535
0
          count++;
1536
0
        if (count == post)
1537
0
          return i;
1538
0
      }
1539
0
      break;
1540
0
    case CS_ARCH_XCORE:
1541
0
      for (i = 0; i < insn->detail->xcore.op_count; i++) {
1542
0
        if (insn->detail->xcore.operands[i].type == (xcore_op_type)op_type)
1543
0
          count++;
1544
0
        if (count == post)
1545
0
          return i;
1546
0
      }
1547
0
      break;
1548
0
    case CS_ARCH_TRICORE:
1549
0
      for (i = 0; i < insn->detail->tricore.op_count; i++) {
1550
0
        if (insn->detail->tricore.operands[i].type == (tricore_op_type)op_type)
1551
0
          count++;
1552
0
        if (count == post)
1553
0
          return i;
1554
0
      }
1555
0
      break;
1556
0
    case CS_ARCH_M68K:
1557
0
      for (i = 0; i < insn->detail->m68k.op_count; i++) {
1558
0
        if (insn->detail->m68k.operands[i].type == (m68k_op_type)op_type)
1559
0
          count++;
1560
0
        if (count == post)
1561
0
          return i;
1562
0
      }
1563
0
      break;
1564
0
    case CS_ARCH_TMS320C64X:
1565
0
      for (i = 0; i < insn->detail->tms320c64x.op_count; i++) {
1566
0
        if (insn->detail->tms320c64x.operands[i].type == (tms320c64x_op_type)op_type)
1567
0
          count++;
1568
0
        if (count == post)
1569
0
          return i;
1570
0
      }
1571
0
      break;
1572
0
    case CS_ARCH_M680X:
1573
0
      for (i = 0; i < insn->detail->m680x.op_count; i++) {
1574
0
        if (insn->detail->m680x.operands[i].type == (m680x_op_type)op_type)
1575
0
          count++;
1576
0
        if (count == post)
1577
0
          return i;
1578
0
      }
1579
0
      break;
1580
0
    case CS_ARCH_EVM:
1581
#if 0
1582
      for (i = 0; i < insn->detail->evm.op_count; i++) {
1583
        if (insn->detail->evm.operands[i].type == (evm_op_type)op_type)
1584
          count++;
1585
        if (count == post)
1586
          return i;
1587
      }
1588
#endif
1589
0
      break;
1590
0
    case CS_ARCH_MOS65XX:
1591
0
      for (i = 0; i < insn->detail->mos65xx.op_count; i++) {
1592
0
        if (insn->detail->mos65xx.operands[i].type == (mos65xx_op_type)op_type)
1593
0
          count++;
1594
0
        if (count == post)
1595
0
          return i;
1596
0
      }
1597
0
      break;
1598
0
    case CS_ARCH_WASM:
1599
0
      for (i = 0; i < insn->detail->wasm.op_count; i++) {
1600
0
        if (insn->detail->wasm.operands[i].type == (wasm_op_type)op_type)
1601
0
          count++;
1602
0
        if (count == post)
1603
0
          return i;
1604
0
      }
1605
0
      break;
1606
0
    case CS_ARCH_BPF:
1607
0
      for (i = 0; i < insn->detail->bpf.op_count; i++) {
1608
0
        if (insn->detail->bpf.operands[i].type == (bpf_op_type)op_type)
1609
0
          count++;
1610
0
        if (count == post)
1611
0
          return i;
1612
0
      }
1613
0
      break;
1614
0
    case CS_ARCH_RISCV:
1615
0
      for (i = 0; i < insn->detail->riscv.op_count; i++) {
1616
0
        if (insn->detail->riscv.operands[i].type == (riscv_op_type)op_type)
1617
0
          count++;
1618
0
        if (count == post)
1619
0
          return i;
1620
0
      }
1621
0
      break;
1622
0
    case CS_ARCH_SH:
1623
0
      for (i = 0; i < insn->detail->sh.op_count; i++) {
1624
0
        if (insn->detail->sh.operands[i].type == (sh_op_type)op_type)
1625
0
          count++;
1626
0
        if (count == post)
1627
0
          return i;
1628
0
      }
1629
0
      break;
1630
0
  }
1631
1632
0
  return -1;
1633
0
}
1634
1635
CAPSTONE_EXPORT
1636
cs_err CAPSTONE_API cs_regs_access(csh ud, const cs_insn *insn,
1637
    cs_regs regs_read, uint8_t *regs_read_count,
1638
    cs_regs regs_write, uint8_t *regs_write_count)
1639
0
{
1640
0
  struct cs_struct *handle;
1641
1642
0
  if (!ud)
1643
0
    return -1;
1644
1645
0
  handle = (struct cs_struct *)(uintptr_t)ud;
1646
1647
#ifdef CAPSTONE_DIET
1648
  // This API does not work in DIET mode
1649
  handle->errnum = CS_ERR_DIET;
1650
  return CS_ERR_DIET;
1651
#else
1652
0
  if (!handle->detail) {
1653
0
    handle->errnum = CS_ERR_DETAIL;
1654
0
    return CS_ERR_DETAIL;
1655
0
  }
1656
1657
0
  if (!insn->id) {
1658
0
    handle->errnum = CS_ERR_SKIPDATA;
1659
0
    return CS_ERR_SKIPDATA;
1660
0
  }
1661
1662
0
  if (!insn->detail) {
1663
0
    handle->errnum = CS_ERR_DETAIL;
1664
0
    return CS_ERR_DETAIL;
1665
0
  }
1666
1667
0
  if (handle->reg_access) {
1668
0
    handle->reg_access(insn, regs_read, regs_read_count, regs_write, regs_write_count);
1669
0
  } else {
1670
    // this arch is unsupported yet
1671
0
    handle->errnum = CS_ERR_ARCH;
1672
0
    return CS_ERR_ARCH;
1673
0
  }
1674
1675
0
  return CS_ERR_OK;
1676
0
#endif
1677
0
}