Package vivisect :: Package vamp
[hide private]
[frames] | no frames]

Package vamp

source code


Vamp is a function/codeblock signaturing framework which is
a subcomponent of vivisect.  These may be used to import/export
signature sets and potentially identify code reuse or static
linking...

Current signature ideas:
    function arg count
    code block count
    globals refs
    code block refs
    unusual instruction use
    odd immediates
    import calls
    other signature calls
    certianty index
    Exception handling

    There will be function characteristics and code-block
    characteristics...

NOTE: Initial signature code consists entirely of the envi
bytesig module and byte/mask sets for known function signatures.

Submodules [hide private]

Classes [hide private]
  Signature
A function/procedure signature.
Functions [hide private]
 
genSigAndMask(vw, funcva)
Generate an envi bytesig signature and mask for the given function block.
source code
Function Details [hide private]

genSigAndMask(vw, funcva)

source code 

Generate an envi bytesig signature and mask for the given function block. This will properly mask off relocations if present.