282 lines
6.9 KiB
C
282 lines
6.9 KiB
C
|
#ifndef __STUB_H__
|
||
|
|
#define __STUB_H__
|
||
|
|
|
||
|
|
|
||
|
|
#ifdef _WIN32
|
||
|
|
//windows
|
||
|
|
#include <windows.h>
|
||
|
|
#else
|
||
|
|
//linux
|
||
|
|
#include <unistd.h>
|
||
|
|
#include <sys/mman.h>
|
||
|
|
#endif
|
||
|
|
//c
|
||
|
|
#include <cstddef>
|
||
|
|
#include <cstring>
|
||
|
|
//c++
|
||
|
|
#include <map>
|
||
|
|
|
||
|
|
|
||
|
|
#define ADDR(CLASS_NAME,MEMBER_NAME) (&CLASS_NAME::MEMBER_NAME)
|
||
|
|
|
||
|
|
/**********************************************************
|
||
|
|
replace function
|
||
|
|
**********************************************************/
|
||
|
|
|
||
|
|
|
||
|
|
#if defined(__aarch64__) || defined(_M_ARM64)
|
||
|
|
#define CODESIZE 16U
|
||
|
|
#define CODESIZE_MIN 16U
|
||
|
|
#define CODESIZE_MAX CODESIZE
|
||
|
|
// ldr x9, +8
|
||
|
|
// br x9
|
||
|
|
// addr
|
||
|
|
#define REPLACE_FAR(t, fn, fn_stub)\
|
||
|
|
((uint32_t*)fn)[0] = 0x58000040 | 9;\
|
||
|
|
((uint32_t*)fn)[1] = 0xd61f0120 | (9 << 5);\
|
||
|
|
*(long long *)(fn + 8) = (long long )fn_stub;
|
||
|
|
#define REPLACE_NEAR(t, fn, fn_stub) REPLACE_FAR(t, fn, fn_stub)
|
||
|
|
#elif defined(__arm__) || defined(_M_ARM)
|
||
|
|
#define CODESIZE 8U
|
||
|
|
#define CODESIZE_MIN 8U
|
||
|
|
#define CODESIZE_MAX CODESIZE
|
||
|
|
// ldr pc, [pc, #-4]
|
||
|
|
#define REPLACE_FAR(t, fn, fn_stub)\
|
||
|
|
((uint32_t*)fn)[0] = 0xe51ff004;\
|
||
|
|
((uint32_t*)fn)[1] = (uint32_t)fn_stub;
|
||
|
|
#define REPLACE_NEAR(t, fn, fn_stub) REPLACE_FAR(t, fn, fn_stub)
|
||
|
|
#elif defined(__thumb__) || defined(_M_THUMB)
|
||
|
|
#error "Thumb is not supported"
|
||
|
|
#else //__i386__ _x86_64__
|
||
|
|
#define CODESIZE 13U
|
||
|
|
#define CODESIZE_MIN 5U
|
||
|
|
#define CODESIZE_MAX CODESIZE
|
||
|
|
//13 byte(jmp m16:64)
|
||
|
|
//movabs $0x102030405060708,%r11
|
||
|
|
//jmpq *%r11
|
||
|
|
#define REPLACE_FAR(t, fn, fn_stub)\
|
||
|
|
*fn = 0x49;\
|
||
|
|
*(fn + 1) = 0xbb;\
|
||
|
|
*(long long *)(fn + 2) = (long long)fn_stub;\
|
||
|
|
*(fn + 10) = 0x41;\
|
||
|
|
*(fn + 11) = 0xff;\
|
||
|
|
*(fn + 12) = 0xe3;
|
||
|
|
|
||
|
|
//5 byte(jmp rel32)
|
||
|
|
#define REPLACE_NEAR(t, fn, fn_stub)\
|
||
|
|
*fn = 0xE9;\
|
||
|
|
*(int *)(fn + 1) = (int)(fn_stub - fn - CODESIZE_MIN);
|
||
|
|
#endif
|
||
|
|
|
||
|
|
struct func_stub
|
||
|
|
{
|
||
|
|
char *fn;
|
||
|
|
unsigned char code_buf[CODESIZE];
|
||
|
|
bool far_jmp;
|
||
|
|
};
|
||
|
|
|
||
|
|
class Stub
|
||
|
|
{
|
||
|
|
public:
|
||
|
|
Stub()
|
||
|
|
{
|
||
|
|
#ifdef _WIN32
|
||
|
|
SYSTEM_INFO sys_info;
|
||
|
|
GetSystemInfo(&sys_info);
|
||
|
|
m_pagesize = sys_info.dwPageSize;
|
||
|
|
#else
|
||
|
|
m_pagesize = sysconf(_SC_PAGE_SIZE);
|
||
|
|
#endif
|
||
|
|
|
||
|
|
if (m_pagesize < 0)
|
||
|
|
{
|
||
|
|
m_pagesize = 4096;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
~Stub()
|
||
|
|
{
|
||
|
|
std::map<char*,func_stub*>::iterator iter;
|
||
|
|
struct func_stub *pstub;
|
||
|
|
for(iter=m_result.begin(); iter != m_result.end(); iter++)
|
||
|
|
{
|
||
|
|
pstub = iter->second;
|
||
|
|
#ifdef _WIN32
|
||
|
|
DWORD lpflOldProtect;
|
||
|
|
if(0 != VirtualProtect(pageof(pstub->fn), m_pagesize * 2, PAGE_EXECUTE_READWRITE, &lpflOldProtect))
|
||
|
|
#else
|
||
|
|
if (0 == mprotect(pageof(pstub->fn), m_pagesize * 2, PROT_READ | PROT_WRITE | PROT_EXEC))
|
||
|
|
#endif
|
||
|
|
{
|
||
|
|
|
||
|
|
if(pstub->far_jmp)
|
||
|
|
{
|
||
|
|
std::memcpy(pstub->fn, pstub->code_buf, CODESIZE_MAX);
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
std::memcpy(pstub->fn, pstub->code_buf, CODESIZE_MIN);
|
||
|
|
}
|
||
|
|
|
||
|
|
#ifdef _WIN32
|
||
|
|
VirtualProtect(pageof(pstub->fn), m_pagesize * 2, PAGE_EXECUTE_READ, &lpflOldProtect);
|
||
|
|
#else
|
||
|
|
mprotect(pageof(pstub->fn), m_pagesize * 2, PROT_READ | PROT_EXEC);
|
||
|
|
#endif
|
||
|
|
}
|
||
|
|
|
||
|
|
iter->second = NULL;
|
||
|
|
delete pstub;
|
||
|
|
}
|
||
|
|
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
template<typename T,typename S>
|
||
|
|
void set(T addr, S addr_stub)
|
||
|
|
{
|
||
|
|
char * fn;
|
||
|
|
char * fn_stub;
|
||
|
|
fn = addrof(addr);
|
||
|
|
fn_stub = addrof(addr_stub);
|
||
|
|
struct func_stub *pstub;
|
||
|
|
pstub = new func_stub;
|
||
|
|
//start
|
||
|
|
pstub->fn = fn;
|
||
|
|
|
||
|
|
if(distanceof(fn, fn_stub))
|
||
|
|
{
|
||
|
|
pstub->far_jmp = true;
|
||
|
|
std::memcpy(pstub->code_buf, fn, CODESIZE_MAX);
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
pstub->far_jmp = false;
|
||
|
|
std::memcpy(pstub->code_buf, fn, CODESIZE_MIN);
|
||
|
|
}
|
||
|
|
|
||
|
|
#ifdef _WIN32
|
||
|
|
DWORD lpflOldProtect;
|
||
|
|
if(0 == VirtualProtect(pageof(pstub->fn), m_pagesize * 2, PAGE_EXECUTE_READWRITE, &lpflOldProtect))
|
||
|
|
#else
|
||
|
|
if (-1 == mprotect(pageof(pstub->fn), m_pagesize * 2, PROT_READ | PROT_WRITE | PROT_EXEC))
|
||
|
|
#endif
|
||
|
|
{
|
||
|
|
throw("stub set memory protect to w+r+x faild");
|
||
|
|
}
|
||
|
|
|
||
|
|
if(pstub->far_jmp)
|
||
|
|
{
|
||
|
|
REPLACE_FAR(this, fn, fn_stub);
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
REPLACE_NEAR(this, fn, fn_stub);
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
#ifdef _WIN32
|
||
|
|
if(0 == VirtualProtect(pageof(pstub->fn), m_pagesize * 2, PAGE_EXECUTE_READ, &lpflOldProtect))
|
||
|
|
#else
|
||
|
|
if (-1 == mprotect(pageof(pstub->fn), m_pagesize * 2, PROT_READ | PROT_EXEC))
|
||
|
|
#endif
|
||
|
|
{
|
||
|
|
throw("stub set memory protect to r+x failed");
|
||
|
|
}
|
||
|
|
m_result.insert(std::pair<char*,func_stub*>(fn,pstub));
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
template<typename T>
|
||
|
|
void reset(T addr)
|
||
|
|
{
|
||
|
|
char * fn;
|
||
|
|
fn = addrof(addr);
|
||
|
|
|
||
|
|
std::map<char*,func_stub*>::iterator iter = m_result.find(fn);
|
||
|
|
|
||
|
|
if (iter == m_result.end())
|
||
|
|
{
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
struct func_stub *pstub;
|
||
|
|
pstub = iter->second;
|
||
|
|
|
||
|
|
#ifdef _WIN32
|
||
|
|
DWORD lpflOldProtect;
|
||
|
|
if(0 == VirtualProtect(pageof(pstub->fn), m_pagesize * 2, PAGE_EXECUTE_READWRITE, &lpflOldProtect))
|
||
|
|
#else
|
||
|
|
if (-1 == mprotect(pageof(pstub->fn), m_pagesize * 2, PROT_READ | PROT_WRITE | PROT_EXEC))
|
||
|
|
#endif
|
||
|
|
{
|
||
|
|
throw("stub reset memory protect to w+r+x faild");
|
||
|
|
}
|
||
|
|
|
||
|
|
if(pstub->far_jmp)
|
||
|
|
{
|
||
|
|
std::memcpy(pstub->fn, pstub->code_buf, CODESIZE_MAX);
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
std::memcpy(pstub->fn, pstub->code_buf, CODESIZE_MIN);
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
#ifdef _WIN32
|
||
|
|
if(0 == VirtualProtect(pageof(pstub->fn), m_pagesize * 2, PAGE_EXECUTE_READ, &lpflOldProtect))
|
||
|
|
#else
|
||
|
|
if (-1 == mprotect(pageof(pstub->fn), m_pagesize * 2, PROT_READ | PROT_EXEC))
|
||
|
|
#endif
|
||
|
|
{
|
||
|
|
throw("stub reset memory protect to r+x failed");
|
||
|
|
}
|
||
|
|
m_result.erase(iter);
|
||
|
|
delete pstub;
|
||
|
|
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
private:
|
||
|
|
char *pageof(char* addr)
|
||
|
|
{
|
||
|
|
#ifdef _WIN32
|
||
|
|
return (char *)((unsigned long long)addr & ~(m_pagesize - 1));
|
||
|
|
#else
|
||
|
|
return (char *)((unsigned long)addr & ~(m_pagesize - 1));
|
||
|
|
#endif
|
||
|
|
}
|
||
|
|
|
||
|
|
template<typename T>
|
||
|
|
char* addrof(T addr)
|
||
|
|
{
|
||
|
|
union
|
||
|
|
{
|
||
|
|
T _s;
|
||
|
|
char* _d;
|
||
|
|
}ut;
|
||
|
|
ut._s = addr;
|
||
|
|
return ut._d;
|
||
|
|
}
|
||
|
|
|
||
|
|
bool distanceof(char* addr, char* addr_stub)
|
||
|
|
{
|
||
|
|
std::ptrdiff_t diff = addr_stub >= addr ? addr_stub - addr : addr - addr_stub;
|
||
|
|
if((sizeof(addr) > 4) && (((diff >> 31) - 1) > 0))
|
||
|
|
{
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
private:
|
||
|
|
#ifdef _WIN32
|
||
|
|
//LLP64
|
||
|
|
long long m_pagesize;
|
||
|
|
#else
|
||
|
|
//LP64
|
||
|
|
long m_pagesize;
|
||
|
|
#endif
|
||
|
|
std::map<char*, func_stub*> m_result;
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
|
||
|
|
#endif
|