AutoLibcFlags is a IDApro plugin that will automatically replace the flags in libc standard functions with enum.
The plugin support also custom functions, See #Adding new functions.
Only X64 is supported for the moment.
This is a simple POC project. This project isn't very usefull since enum flag will change following source and compilator so i will only track recent linux source.
REQUIRE IDA7.X+ OR SUPERIOR
All libc standard enum which are supported are in enum/ folder. Feel free to pull requests to add new functions.
git clone [email protected]:0xMirasio/IDALibcAutoFlags.git
cd IDALibcAutoFlags
python3 install.pyPress CTRL+Shit+F1 or Edit->Plugins->IDALibcAutoFlags to use plugins! (+F5 to refresh page for decompilation output)
edit functions.json file.
You need to add the following format:
{"function_name": [ [index, register_associated_enum], [index, register_associated_enum], ...]}
For example, SendCrypto(&buf, &output, O_RDONLY, USE_SSL) -> the flags are on index 2 and 3. O_RDONLY come from fcntl.h and USE_SSL from customssl.h headers.
We will have:
{
"SendCrypto":
[2,"fcntl"],
[3, "customssl"]
}
You must create a enumFile in enum/ with the following format:
1 USE_SSL
That's it !
You can also use the parseHeaders.py script in scripts for autoParse C header file and generate the corresponding file required.
(Small modifications may be required, just a develloper helper script)
Only x64 classical is supported for the moment. Bug and fails will occur on others platforms. Lot of missing flags