Skip to content
Snippets Groups Projects
Clark Coleman's avatar
Clark Coleman authored
Try to get STARS/IRDB to imitate STARS/IDA more closely on static memory operand processing to help move_globals.
33749059
History
The files in this directory implement STARS.


0) TERMINOLOGY 

SMP = Software Memory Protection

mmStrata = Memory Monitor Strata, the memory protection SDT that uses
the annotations output by SMPStaticAnalyzer.

1) BUILDING THE STATIC ANALYZER PLUGIN

scons [build_ida=0/1] [build_ida7=0/1] [build_irdb=0/1] [debug=0/1]


2) RUNNING THE STATIC ANALYZER ON AN EXECUTABLE

The file SMP-analyze.sh is invoked to run STARS on an
executable. To analyze foo.exe,  type:

/path/to/SMP-analyze.sh foo.exe

Annotations will be found in "foo.annot" in the same
directory you worked from. The annotations are not sorted by address,
because some addresses are detected outside of IDA functions and dealt
with in an ad hoc manner. Invoking "sort foo.annot" will sort by the
first field, which is the address. This is not necessary with the
current version of mmStrata.

NOTE: Currently, STARS is only targeted to x86/Linux (32 and 64-bit).
STARS invokes objdump, which should be installed on any x86/Linux box.