gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2025-12-05 20:40:05 -08:00
Code Issues Packages Projects Releases Wiki Activity

binary ninja: use function.callers to compute call graph

Browse Source
This commit is contained in:
Willi Ballenthin
2024-11-27 12:18:38 +00:00
parent 73f56f585c
commit 61e1684783
1 changed files with 5 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
capa/features/extractors/binja/extractor.py
View File

@@ -61,40 +61,11 @@ class BinjaFeatureExtractor(StaticFeatureExtractor):
f: Function
for f in self.bv.functions:
bv: BinaryView = f.view
for bbil in f.llil:
for llil in bbil:
if llil.operation not in (
LowLevelILOperation.LLIL_CALL,
LowLevelILOperation.LLIL_CALL_STACK_ADJUST,
LowLevelILOperation.LLIL_JUMP,
LowLevelILOperation.LLIL_TAILCALL,
):
continue
if llil.dest.value.type not in (
RegisterValueType.ImportedAddressValue,
RegisterValueType.ConstantValue,
RegisterValueType.ConstantPointerValue,
):
continue
address = llil.dest.value.value
for sym in bv.get_symbols(address):
if not sym:
continue
if sym.type not in (
SymbolType.ImportAddressSymbol,
SymbolType.ImportedFunctionSymbol,
SymbolType.FunctionSymbol,
):
continue
calls_from[f.start].add(address)
calls_to[address].add(f.start)
for caller in f.callers:
if caller == f:
logger.debug("recursive: 0x%x", f.start)
calls_from[caller.start].add(f.start)
calls_to[f.start].add(caller.start)
call_graph = {
"calls_to": calls_to,