2024-02-12 05:44:38 +00:00
|
|
|
#include <sys/mman.h>
|
|
|
|
|
|
|
|
#include <libreborn/libreborn.h>
|
|
|
|
#include "patch-internal.h"
|
|
|
|
|
2024-07-17 07:44:41 +00:00
|
|
|
// Limit Amount Of overwrite_calls() Calls
|
|
|
|
#define MAX_OVERWRITE_CALLS 4096
|
2024-07-14 09:06:27 +00:00
|
|
|
static unsigned char *code_block = nullptr;
|
2024-02-12 05:44:38 +00:00
|
|
|
#define CODE_SIZE 8
|
2024-07-17 07:44:41 +00:00
|
|
|
#define CODE_BLOCK_SIZE (MAX_OVERWRITE_CALLS * CODE_SIZE)
|
2024-02-12 05:44:38 +00:00
|
|
|
static int code_block_remaining = CODE_BLOCK_SIZE;
|
|
|
|
|
|
|
|
// Create Long Overwrite At Current Position
|
|
|
|
static void long_overwrite(void *start, void *target) {
|
|
|
|
unsigned char patch_data[4] = {0x04, 0xf0, 0x1f, 0xe5}; // "ldr pc, [pc, #-0x4]"
|
2024-07-14 09:06:27 +00:00
|
|
|
patch(start, patch_data);
|
|
|
|
patch_address((void *) (((unsigned char *) start) + 4), target);
|
2024-02-12 05:44:38 +00:00
|
|
|
}
|
|
|
|
void *update_code_block(void *target) {
|
|
|
|
// BL Instructions can only access a limited portion of memory.
|
|
|
|
// So this allocates memory closer to the original instruction,
|
|
|
|
// that when run, will jump into the actual target.
|
2024-07-14 09:06:27 +00:00
|
|
|
if (code_block == nullptr) {
|
2024-02-12 05:44:38 +00:00
|
|
|
code_block = (unsigned char *) mmap((void *) 0x200000, CODE_BLOCK_SIZE, PROT_READ | PROT_WRITE | PROT_EXEC, MAP_PRIVATE | MAP_ANONYMOUS, -1, 0);
|
|
|
|
if (code_block == MAP_FAILED) {
|
|
|
|
ERR("Unable To Allocate Code Block: %s", strerror(errno));
|
|
|
|
}
|
|
|
|
DEBUG("Code Block Allocated At: 0x%08x", (uint32_t) code_block);
|
|
|
|
// Store Segment
|
2024-07-14 09:06:27 +00:00
|
|
|
segment_data data = {};
|
2024-02-12 05:44:38 +00:00
|
|
|
data.start = code_block;
|
|
|
|
data.end = (void *) (((uintptr_t) code_block) + CODE_BLOCK_SIZE);
|
|
|
|
data.is_executable = true;
|
|
|
|
data.is_writable = true;
|
|
|
|
add_segment(data);
|
|
|
|
}
|
|
|
|
if (code_block_remaining < CODE_SIZE) {
|
|
|
|
ERR("Maximum Amount Of overwrite_calls() Uses Reached");
|
|
|
|
}
|
|
|
|
long_overwrite(code_block, target);
|
|
|
|
// Return
|
|
|
|
return code_block;
|
|
|
|
}
|
|
|
|
void increment_code_block() {
|
|
|
|
code_block = code_block + CODE_SIZE;
|
|
|
|
code_block_remaining = code_block_remaining - CODE_SIZE;
|
|
|
|
}
|