functions.c

#include <stdio.h>
#include <string.h>
#include <sys/ptrace.h>

extern int pid;

struct functions {
	const char * function_name;
	int return_type;
	int no_params;
	int params_type[10];
};

/*
 *	Lista de types:
 */

#define	_T_UNKNOWN	-1
#define	_T_VOID		0
#define	_T_INT		1
#define	_T_UINT		2
#define	_T_OCTAL	3
#define	_T_CHAR		4
#define	_T_STRING	5
#define	_T_ADDR		6
#define	_T_FILE		7
#define	_T_HEX		8
#define	_T_FORMAT	9		/* printf-like format */

struct functions functions_list[] = {
	{"atexit",      _T_INT,     1, {_T_ADDR}},
	{"close",       _T_INT,     1, {_T_INT}},
	{"exit",        _T_INT,     1, {_T_INT}},
	{"fclose",      _T_INT,     1, {_T_FILE}},
	{"fprintf",     _T_INT,     2, {_T_FILE, _T_FORMAT}},
	{"free",        _T_INT,     1, {_T_ADDR}},
	{"gethostname", _T_INT,     2, {_T_STRING, _T_INT}},
	{"getopt_long", _T_INT,     5, {_T_INT, _T_ADDR, _T_STRING, _T_ADDR, _T_ADDR}},
	{"malloc",      _T_ADDR,    1, {_T_UINT}},
	{"memset",      _T_ADDR,    3, {_T_ADDR, _T_CHAR, _T_UINT}},
	{"mkdir",       _T_INT,     2, {_T_STRING, _T_OCTAL}},
	{"printf",      _T_INT,     1, {_T_FORMAT}},
	{"rindex",      _T_STRING,  2, {_T_STRING, _T_CHAR}},
	{"strcmp",      _T_INT,     2, {_T_STRING, _T_STRING}},
	{"strncmp",     _T_INT,     3, {_T_STRING, _T_STRING, _T_INT}},
	{"time",        _T_UINT,    1, {_T_ADDR}},
	{NULL,          _T_UNKNOWN, 5, {_T_UNKNOWN, _T_UNKNOWN, _T_UNKNOWN, _T_UNKNOWN, _T_UNKNOWN}},
};

static char * process_string(unsigned char * str)
{
	static char tmp[256];

	tmp[0] = '\0';
	while(*str) {
		switch(*str) {
			case '\r':	strcat(tmp,"\\r"); break;
			case '\n':	strcat(tmp,"\\n"); break;
			case '\t':	strcat(tmp,"\\t"); break;
			case '\\':	strcat(tmp,"\\"); break;
			default:
				if ((*str<32) || (*str>126)) {
					sprintf(tmp,"%s\\%03o", tmp, *str);
				} else {
					sprintf(tmp, "%s%c", tmp, *str);
				}
		}
		str++;
	}
	return tmp;
}

static char * print_string(int addr)
{
	static char tmp[256];
	int a;
	int i=0;

	tmp[0] = '\0';
	while(1) {
		a = ptrace(PTRACE_PEEKTEXT, pid, addr+i, 0);
		*(int *)&tmp[i] = a;
		if (!tmp[i] || !tmp[i+1] || !tmp[i+2] || !tmp[i+3] || i>100) {
			break;
		}
		i += 4;
	}
	return process_string(tmp);
}

static char * print_param(int type, int esp)
{
	static char tmp[256];
	int a;

	a = ptrace(PTRACE_PEEKTEXT, pid, esp, 0);

	switch(type) {
		case _T_STRING:
		case _T_FORMAT:
			sprintf(tmp,"\"%s\"",print_string(a));
			break;
		default:
			if (a<1000000 && a>-1000000) {
				sprintf(tmp, "%d", a);
			} else {
				sprintf(tmp, "0x%08x", a);
			}
	}
	return tmp;
}

void print_function(const char *name, int esp)
{
	struct functions * tmp;
	char message[1024];
	int i;

	tmp = &functions_list[0];

	while(tmp->function_name) {
		if (!strcmp(name, tmp->function_name)) {
			break;
		}
		tmp++;
	}
	sprintf(message, "%s(", name);
	if (tmp->no_params>0) {
		sprintf(message, "%s%s", message, print_param(tmp->params_type[0], esp+4));
	}
	for(i=1; i<tmp->no_params; i++) {
		sprintf(message, "%s,%s", message, print_param(tmp->params_type[i], esp+4*(i+1)));
	}
	fprintf(stderr, "%s) = ???\n", message);
}