package angr.protos

Get desktop application:
View/edit binary Protocol Buffers messages

Derived from McSema's CFG.proto

Used in: Function

• int64 ea = 1

  Effective address of the block

• optional Instruction instructions = 2

  Instructions in this block

• int32 size = 4

  Size of the block

• bytes bytes = 5

  Bytes of this block

Used in: Function

• repeated Edge edges = 1

  All edges inside this graph

• string ident = 1

  The identifier of this CFG

• repeated CFGNode nodes = 2

  All nodes in this CFG

• repeated Edge edges = 3

  All edges in this CFG

• repeated MemoryData memory_data = 4

Used in: CFG

• int64 ea = 1

  Address of the node

• int32 size = 2

  Size of the node

• repeated int64 block_id = 3

  A unique identifier of the node

• bool returning = 4

  If it is a call node, does it return?

Derived from McSema's CFG.proto Corresponds to the XRef class in angr

Used in: Instruction, XRefs

• CodeReference.TargetType target_type = 1

• CodeReference.OperandType operand_type = 2

• CodeReference.Location location = 3

• int64 ea = 4

• int64 mask = 5

  For AArch64

• string name = 6

• int64 data_ea = 7

  Address of the referenced data item/block

• int64 block_ea = 8

  Address of the basic block

• int32 stmt_idx = 9

  Index of the statement where this reference is.

• int32 operand_idx = 10

  The index of the operand in the instruction. -1 if unknown

• CodeReference.ReferenceType ref_type = 11

  Type of this cross reference.

Used in: CodeReference

• Internal = 0

• External = 1

Used in: CodeReference

• ImmediateOperand = 0

• MemoryOperand = 1

• MemoryDisplacementOperand = 2

• ControlFlowOperand = 3

• OffsetTable = 4

Used in: CodeReference

• offset = 0

• read = 1

• write = 2

Used in: CodeReference

• CodeTarget = 0

• DataTarget = 1

• StackTarget = 2

Used in: BlockGraph, CFG

• int64 src_ea = 1

  Address of the source block

• int64 dst_ea = 2

  Address of the destination block

• Edge.JumpKind jumpkind = 3

  Jumpkind of the edge

• bool is_outside = 4

  Is this an edge going outside of the current function?

• int64 ins_addr = 5

  Address of the source instruction

• int64 stmt_idx = 6

  ID of the source statement

• map<string, bytes> data = 7

  A dict of data on this edge. For now, values are pickled from Python objects.

Used in: Edge

• UnknownJumpkind = 0

  Will be translated to None in Python

• Boring = 1

• Call = 2

• Return = 3

• FakeReturn = 4

  More commonly referred to as fall-through edges

• Syscall = 5

• Sys_syscall = 6

  The following jumpkinds are mostly specific to VEX IR

• Sys_int128 = 7

• NoDecode = 8

• EmWarn = 9

• SigFPE_IntDiv = 10

• SigTRAP = 11

• SigSEGV = 12

• MapFail = 13

• NoRedir = 14

• ClientReq = 15

• Exception = 16

Derived from McSema's CFG.proto

• string name = 1

• int64 ea = 2

• ExternalFunction.CallingConvention cc = 3

• bool has_return = 4

• bool no_return = 5

• int32 argument_count = 6

• bool is_weak = 7

• string prototype = 8

Used in: ExternalFunction

• CallerCleanup = 0

• CalleeCleanup = 1

• FastCall = 2

Derived from McSema's CFG.proto

• string name = 1

• int64 ea = 2

• int32 size = 3

• bool is_weak = 4

• bool is_thread_local = 5

• int64 ea = 1

  Effective address

• bool is_entrypoint = 3

  Is this function the entry point of the binary

• repeated Block blocks = 2

  Blocks in this function

• string name = 4

  Function name

• bool is_plt = 7

  If this function is a PLT entry

• bool is_syscall = 8

  Is this function a syscall function

• bool is_simprocedure = 9

  Is this function a SimProcedure

• bool returning = 10

  If this function returns

• string binary_name = 11

  Name of the binary where this function belongs to

• optional BlockGraph graph = 12

  Graph of this function

• repeated int64 external_functions = 13

  Address of referenced functions

• bool alignment = 14

  Whether this function is used as an alignment filling or not

• bool normalized = 15

  Whether this function has been normalized or not

Derived from McSema's CFG.proto

Used in: Block

• int64 ea = 1

• bytes bytes = 2

• optional CodeReference xrefs = 3

• bool local_noreturn = 4

Used in: CFG

• int64 ea = 1

  Address of the data

• int32 size = 2

  Size of the data

• MemoryData.MemoryDataType type = 3

  Type of the data (reference)

Used in: MemoryData

• UnknownDataType = 0

• Unspecified = 1

• Integer = 2

• PointerArray = 3

• String = 4

• UnicodeString = 5

• SegmentBoundary = 6

• CodeReference = 7

• GOTPLTEntry = 8

• ELFHeader = 9

• repeated CodeReference xrefs = 1