HD Moore
255e792ed3
Ruby treats endianess in pack operators in the opposite way
of python. For example, using pack('<I') actually ignores the
endianess specifier. These need to be 'I<' or better yet, 'V'.
The endian specify must occur after the pack specifier and
multiple instances in meterpreter and exe generation were
broken in thier usage.
The summary:
Instead of I/L or I< use V
Instead of I/L or I> use N
For Q, you need to always use Q< (LE) or Q> (BE)
For c/s/l/i and other lowercase variants, you probably dont
need or want a *signed* value, so stick with vV nN and cC.
105 lines
2.0 KiB
Ruby
105 lines
2.0 KiB
Ruby
# -*- coding: binary -*-
|
|
require 'rex/constants'
|
|
|
|
module Rex
|
|
|
|
|
|
###
|
|
#
|
|
# This module provides generalized methods for performing operations that are
|
|
# architecture specific. Furthermore, the modules contained within this
|
|
# module provide features that are specific to a given architecture.
|
|
#
|
|
###
|
|
module Arch
|
|
|
|
#
|
|
# Architecture classes
|
|
#
|
|
require 'rex/arch/x86'
|
|
require 'rex/arch/sparc'
|
|
|
|
#
|
|
# This routine adjusts the stack pointer for a given architecture.
|
|
#
|
|
def self.adjust_stack_pointer(arch, adjustment)
|
|
|
|
if ( arch.is_a?(::Array))
|
|
arch = arch[0]
|
|
end
|
|
|
|
case arch
|
|
when /x86/
|
|
Rex::Arch::X86.adjust_reg(Rex::Arch::X86::ESP, adjustment)
|
|
else
|
|
nil
|
|
end
|
|
end
|
|
|
|
#
|
|
# This route provides address packing for the specified arch
|
|
#
|
|
def self.pack_addr(arch, addr)
|
|
|
|
if ( arch.is_a?(::Array))
|
|
arch = arch[0]
|
|
end
|
|
|
|
case arch
|
|
when ARCH_X86
|
|
[addr].pack('V')
|
|
when ARCH_X86_64
|
|
[addr].pack('Q<')
|
|
when ARCH_MIPS # ambiguous
|
|
[addr].pack('N')
|
|
when ARCH_MIPSBE
|
|
[addr].pack('N')
|
|
when ARCH_MIPSLE
|
|
[addr].pack('V')
|
|
when ARCH_PPC # ambiguous
|
|
[addr].pack('N')
|
|
when ARCH_SPARC
|
|
[addr].pack('N')
|
|
when ARCH_ARMLE
|
|
[addr].pack('V')
|
|
when ARCH_ARMBE
|
|
[addr].pack('N')
|
|
end
|
|
end
|
|
|
|
#
|
|
# This routine reports the endianess of a given architecture
|
|
#
|
|
def self.endian(arch)
|
|
|
|
if ( arch.is_a?(::Array))
|
|
arch = arch[0]
|
|
end
|
|
|
|
case arch
|
|
when ARCH_X86
|
|
return ENDIAN_LITTLE
|
|
when ARCH_X86_64
|
|
return ENDIAN_LITTLE
|
|
when ARCH_MIPS # ambiguous
|
|
return ENDIAN_BIG
|
|
when ARCH_MIPSLE
|
|
return ENDIAN_LITTLE
|
|
when ARCH_MIPSBE
|
|
return ENDIAN_BIG
|
|
when ARCH_PPC # ambiguous
|
|
return ENDIAN_BIG
|
|
when ARCH_SPARC
|
|
return ENDIAN_BIG
|
|
when ARCH_ARMLE
|
|
return ENDIAN_LITTLE
|
|
when ARCH_ARMBE
|
|
return ENDIAN_BIG
|
|
end
|
|
|
|
return ENDIAN_LITTLE
|
|
end
|
|
|
|
end
|
|
end
|