Open Menu / tools / lldbmacros / structanalyze.py
Loading...
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
import lldb
from xnu import *

def _showStructPacking(symbol, prefix, begin_offset=0):
  """
     recursively parse the field members of structure. 
     params : symbol (lldb.SBType) reference to symbol in binary
              prefix (string)      string to be prefixed for each line of output. Useful for recursive struct parsing.
     returns: string containing lines of output.
  """
  ctype = "unknown type"
  if symbol.GetTypeClass() == lldb.eTypeClassUnion :
    ctype = "union"
  if symbol.GetTypeClass() == lldb.eTypeClassStruct :
    ctype = "struct"
  outstr =  "[%4d] (%s) %s { " % (symbol.GetByteSize(), ctype, symbol.GetName()) + "\n"
  numFields = symbol.GetNumberOfFields()
  _has_memory_hole = False
  _compact_size = 0    # asuming the struct is perfectly packed
  _compact_offset = begin_offset
  _previous_bit_offset = 0 
  for i in range(numFields):
    member = symbol.GetFieldAtIndex(i)
    m_offset = member.GetOffsetInBytes() + begin_offset
    m_offset_bits = member.GetOffsetInBits()
    m_type = member.GetType()
    m_name = member.GetName()
    m_size = m_type.GetByteSize()
    warningstr = ""
    debugstr = "" # + str((m_size, m_offset , m_offset_bits, _previous_bit_offset, _compact_offset, begin_offset))
    if _compact_offset != m_offset and (m_offset_bits -  _previous_bit_offset) > m_size*8 :
      _has_memory_hole = True
      warningstr = "   *** Possible memory hole ***" 
      _compact_offset = m_offset
    _compact_offset += m_size
    if m_type.GetTypeClass() == lldb.eTypeClassStruct or m_type.GetTypeClass() == lldb.eTypeClassUnion :
      outstr += prefix + ("*%4d," % m_offset) + _showStructPacking(m_type, prefix+"    ", m_offset) + warningstr + debugstr + "\n"
    else:
      outstr += prefix + ("+%4d,[%4d] (%s) %s" % (m_offset, m_size, m_type.GetName(), m_name)) + warningstr + debugstr + "\n"
    if i > 0 :
      _previous_bit_offset = m_offset_bits
  outstr += prefix + "}"
  if _has_memory_hole == True :
    outstr += "   *** Warning: Struct layout leaves memory hole *** "
  return outstr

@lldb_command('showstructpacking')
def showStructInfo(cmd_args=None):
  """Show how a structure is packed in the binary. The format is 
     +<offset>, [<size_of_member>] (<type>) <name> 
     For example:
      (lldb) script lldbmacros.showStructInfo("pollfd")
      [  8] (struct) pollfd { 
      +  0,[  4] (int) fd
      +  4,[  2] (short) events
      +  6,[  2] (short) revents
      }
    syntax: showstructpacking task
  """
  if not cmd_args:
    raise ArgumentError("Please provide a type name.")
  
  sym = gettype(cmd_args[0])
  if sym == None:
    print "No such struct found"
  if sym.GetTypeClass() == lldb.eTypeClassTypedef:
      sym = sym.GetCanonicalType()
  if sym.GetTypeClass() != lldb.eTypeClassStruct:
    print "%s is not a structure" % cmd_args[0]
  else:
    print _showStructPacking(sym,"", 0)

# EndMacro: showstructinto