Skip to content
Snippets Groups Projects
The files in this directory implement STARS.


0) TERMINOLOGY 

SMP = Software Memory Protection

mmStrata = Memory Monitor Strata, the memory protection SDT that uses
the annotations output by SMPStaticAnalyzer.

1) BUILDING THE STATIC ANALYZER PLUGIN

scons [build_ida=0/1] [build_ida7=0/1] [build_irdb=0/1] [debug=0/1]


2) RUNNING THE STATIC ANALYZER ON AN EXECUTABLE

The file SMP-analyze.sh is invoked to run STARS on an
executable. To analyze foo.exe,  type:

/path/to/SMP-analyze.sh foo.exe

Annotations will be found in "foo.annot" in the same
directory you worked from. The annotations are not sorted by address,
because some addresses are detected outside of IDA functions and dealt
with in an ad hoc manner. Invoking "sort foo.annot" will sort by the
first field, which is the address. This is not necessary with the
current version of mmStrata.

NOTE: Currently, STARS is only targeted to x86/Linux (32 and 64-bit).
STARS invokes objdump, which should be installed on any x86/Linux box.