mirror/ghidra
1
0
Fork 0
mirror of https://github.com/NationalSecurityAgency/ghidra.git synced 2026-09-28 17:11:11 -09:00
Code Issues Packages Projects Releases Wiki Activity

GP-4110 cleaning up bsim scripts

Browse Source
This commit is contained in:
James
2023-12-08 12:43:01 -05:00
parent 2ac8d4a2ec
commit 39982f9984
22 changed files with 538 additions and 817 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
Ghidra/Features/BSim/ghidra_scripts/TailoredAnalysis.java
View File

@@ -21,13 +21,14 @@ import ghidra.program.model.listing.Program;
// suitable for BSim ingest process. Intended to be invoked as an analyzeHeadless -preScript
//@category BSim
//note: script mentioned in BSim documentation by name
public class TailoredAnalysis extends GhidraScript {
@Override
public void run() throws Exception {
Options pl = currentProgram.getOptions(Program.ANALYSIS_PROPERTIES);
pl.setBoolean("Decompiler Parameter ID", false);
// These analyzers generate lots of cross references, which are not necessary for
// signature analysis, and take time to run. On the other hand, you may want
// them in general to facilitate general analysis
@@ -42,9 +43,15 @@ public class TailoredAnalysis extends GhidraScript {
// analyzerOptions.setBoolean("Commit Function Signatures", false);
// You really want these options turned on
pl.setBoolean("Shared Return Calls",true);
pl.setBoolean("Function Start Search", true);
pl.setBoolean("DWARF", false);
pl.setBoolean("Shared Return Calls", true);
pl.setBoolean("Function Start Search", true);
//The DWARF analyzer can take a long time, so for mass ingest it might be worth
//turning it off
//Moreover, the DWARF analyzer can lock prototypes, which can change the BSim signature
//of a function. This can negatively impact matches between executables with DWARF
//and executables without it.
pl.setBoolean("DWARF", false);
// Options analyzerOptions = pl.getOptions("Function Start Search");
// analyzerOptions.setBoolean("Search Data Blocks", true);
// analyzerOptions = pl.getOptions("Function Start Search After Code");