gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2025-12-12 15:49:46 -08:00
Code Issues Packages Projects Releases Wiki Activity

code style: Fix the format of the committed code

Browse Source
This commit is contained in:
Yacine Elhamer
2023-04-23 02:31:11 +01:00
parent b32a8ca510
commit ee881ab82f
2 changed files with 16 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
capa/features/extractors/elf.py
View File

@@ -90,7 +90,7 @@ class Shdr:
link: int
entsize: int
buf: bytes
@classmethod
def from_viv(cls, section, buf: bytes):
"""
@@ -98,16 +98,16 @@ class Shdr:
section headers (Elf.Elf32Section or Elf.Elf64Section)
"""
return cls(
int(section.vsGetField('sh_name')),
int(section.vsGetField('sh_type')),
int(section.vsGetField('sh_flags')),
int(section.vsGetField('sh_addr')),
int(section.vsGetField('sh_offset')),
int(section.vsGetField('sh_size')),
int(section.vsGetField('sh_link')),
int(section.vsGetField('sh_entsize')),
int(section.vsGetField("sh_name")),
int(section.vsGetField("sh_type")),
int(section.vsGetField("sh_flags")),
int(section.vsGetField("sh_addr")),
int(section.vsGetField("sh_offset")),
int(section.vsGetField("sh_size")),
int(section.vsGetField("sh_link")),
int(section.vsGetField("sh_entsize")),
buf,
)
)
class ELF:

12
capa/features/extractors/viv/insn.py
View File

@@ -122,18 +122,18 @@ def extract_insn_api_features(fh: FunctionHandle, bb, ih: InsnHandle) -> Iterato
yield API(name[1:]), ih.address
return
if f.vw.metadata['Format'] == 'elf':
if not hasattr(extract_insn_api_features, 'symtab'):
if f.vw.metadata["Format"] == "elf":
if not hasattr(extract_insn_api_features, "symtab"):
# the symbol table gets stored as a function's attribute in order to avoid running
# this code everytime the call is made, thus preventing the computational overhead.
elf = f.vw.parsedbin
endian = '<' if elf.getEndian() == 0 else '>'
endian = "<" if elf.getEndian() == 0 else ">"
bitness = elf.bits
SHT_SYMTAB = 0x2
for section in elf.sections:
if section.vsGetField('sh_info') & SHT_SYMTAB != 0:
strtab = elf.sections[section.vsGetField('sh_link')]
if section.vsGetField("sh_info") & SHT_SYMTAB != 0:
strtab = elf.sections[section.vsGetField("sh_link")]
sh_symtab = Shdr.from_viv(section, elf.getSectionBytes(section.name))
sh_strtab = Shdr.from_viv(strtab, elf.getSectionBytes(strtab.name))
@@ -145,7 +145,7 @@ def extract_insn_api_features(fh: FunctionHandle, bb, ih: InsnHandle) -> Iterato
sym_name = symtab.get_name(symbol)
sym_value = symbol.value
sym_info = symbol.info
STT_FUNC = 0x2
if sym_value == target and sym_info & STT_FUNC != 0:
yield API(sym_name), ih.address