Skip to content

Fixed some coloring issues. #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
strazzere wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Fixed some coloring issues. #6

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 17 additions & 3 deletions DEXTemplate.bt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,12 +4,19 @@
// File: DEXTemplate.bt
// Author: Jon Larimer <[email protected]>
// Tim Strazzere <[email protected]> <[email protected]>
// Revision: 1.3
// Revision: 1.4
// Purpose: A template for analyzing Dalvik VM (Android) DEX files
//
// License: This file is released into the public domain. People may
// use it for any purpose, commercial or otherwise.
//--------------------------------------
// Version 1.4 (2013-8-12)
//
// FIXED:
// - Fixed linked section to only color if section is not null or zero
// - Color the header_size to red if not expected 0x70 size, indicated
// "big ego"/section stuffer attack
//
// Version 1.3 (2013-2-7)
//
// FIXED:
Expand Down Expand Up @@ -469,10 +476,15 @@ typedef struct {
SHA1 signature <comment="SHA-1 signature of rest of file">;
uint file_size <comment="File size in bytes">;

if(ReadUInt(FTell()) != 0x70) {
SetBackColor(cLtRed);
}
uint header_size <comment="Header size in bytes">;
if(header_size > 0x70) {
Warning("Header size appears be to larger than expected");
}
// Ensure we reset color to not bleed
SetBackColor(cLtGreen);

uint endian_tag <format=hex, comment="Endianness tag">;

Expand All @@ -481,13 +493,15 @@ typedef struct {
Warning("Invalid endian_tag %.8X, should be %.8X", endian_tag, ENDIAN_CONSTANT);
}


SetBackColor(cLtRed);
if(ReadUInt(FTell()) != 0 && ReadUInt(FTell() + 4) != 0) {
SetBackColor(cLtRed);
}
uint link_size <comment="Size of link section">;
uint link_off <comment="File offset of link section">;
if(link_size != 0 || link_off != 0) {
Warning("A link section appears to be set, this is not supported");
}
// Ensure we reset color to not bleed
SetBackColor(cLtGreen);

uint map_off <comment="File offset of map list">;
Expand Down