gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2025-12-12 15:49:46 -08:00
Code Issues Packages Projects Releases Wiki Activity

base extractor: use handles

Browse Source
This commit is contained in:
Willi Ballenthin
2022-05-24 12:29:38 -06:00
parent 4a577fabfc
commit e4caa1d729
1 changed files with 19 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
capa/features/extractors/base_extractor.py
View File

@@ -323,53 +323,53 @@ class NullFeatureExtractor(FeatureExtractor):
yield feature, va
def get_functions(self):
for va in sorted(self.features["functions"].keys()):
yield va
for addr in sorted(self.features["functions"].keys()):
yield FunctionHandle(addr, None)
def extract_function_features(self, f):
for p in self.features.get("functions", {}).get(f, {}).get("features", []): # noqa: E127 line over-indented
va, feature = p
yield feature, va
for p in self.features.get("functions", {}).get(f.address, {}).get("features", []): # noqa: E127 line over-indented
addr, feature = p
yield feature, addr
def get_basic_blocks(self, f):
for va in sorted(
for addr in sorted(
self.features.get("functions", {}) # noqa: E127 line over-indented
.get(f, {})
.get(f.address, {})
.get("basic blocks", {})
.keys()
):
yield va
yield BBHandle(addr, None)
def extract_basic_block_features(self, f, bb):
for p in (
self.features.get("functions", {}) # noqa: E127 line over-indented
.get(f, {})
.get(f.address, {})
.get("basic blocks", {})
.get(bb, {})
.get(bb.address, {})
.get("features", [])
):
va, feature = p
yield feature, va
addr, feature = p
yield feature, addr
def get_instructions(self, f, bb):
for va in sorted(
for addr in sorted(
self.features.get("functions", {}) # noqa: E127 line over-indented
.get(f, {})
.get(f.address, {})
.get("basic blocks", {})
.get(bb, {})
.get(bb.address, {})
.get("instructions", {})
.keys()
):
yield va
yield InsnHandle(addr, None)
def extract_insn_features(self, f, bb, insn):
for p in (
self.features.get("functions", {}) # noqa: E127 line over-indented
.get(f, {})
.get(f.address, {})
.get("basic blocks", {})
.get(bb, {})
.get(bb.address, {})
.get("instructions", {})
.get(insn, {})
.get(insn.address, {})
.get("features", [])
):
va, feature = p