jump_tables
This module defines common relations for jump tables.
- jump_table_candidate(EA:address, DataEA:address, DataSize:unsigned, TargetEA:address)
A candidate entry in a jump table (may contain absolute or relative addresses)
Calculated prior to code inference.
Attributes:
EA: The address of the instruction from which the jump occurs.
DataEA: The address at which the actual data entry of the jump table resides.
DataSize: The size of the jump table entry
TargetEA: The target of the jump.
Recursive:
invalid,__agg_single6,next_block_in_byte_interval,must_fallthrough,split_load_for_symbolization,block_points,relative_address_start,split_load_point,possible_target,block_instruction_next,self_contained_segment,data_access,__agg_subclause7,unresolved_block_overlap,reg_def_use.ambiguous_block_last_def,stack_def_use.live_var_used_in_block,split_load_total_points,likely_fallthrough,stack_def_use.block_last_def,code_in_block,const_value_reg_used,possible_target_from,arm_jump_table_data_block,block_heuristic,symbolic_expr_from_relocation,flags_and_jump_pair,litpool_boundaries,block_limit,got_relative_operand,simple_data_access_pattern,block_implies_block,discarded_block,contains_plausible_instr_seq,split_load_candidate,next_function_entry_initial,gp_relative_operand,wis_schedule,arm_jump_table_data_block_limit,contains_implausible_instr_seq,value_reg_limit,arm_jump_table_cmp_limit,block_overlap,overlapping_instruction,arm_jump_table_skip_first_entry,function_inference.function_entry_initial,inter_procedural_edge,jump_table_element_access,stack_def_use.live_var_at_block_end,data_segment,reg_used_for,arch.extend_load,transition_block_limit,straight_line_def_used,unlikely_have_symbolic_immediate,relative_address,relocation_adjustment_total,stack_def_use.def_used,reg_def_use.block_last_def,symbol_minus_symbol_litpool_access_pattern,jump_table_signed,__agg_single2,stack_def_use.last_def_in_block,value_reg_unsupported,relative_jump_table_entry_candidate,last_value_reg_limit,jump_table_candidate,nop_in_padding_candidate,no_value_reg_limit,negative_block_heuristic,init_symbol_minus_symbol_candidate_arm,next_start,__agg_subclause4,compare_and_jump_immediate,may_fallthrough,indexed_pc_relative_load,branch_to_calculated_pc_rel_addr,candidate_block_is_padding,jump_table_prelude,is_padding,__agg_subclause6,litpool_symbolic_operand,no_return_call_propagated,adjusts_stack_in_block,unresolved_block,reg_def_use.ref_in_block,block_last_instruction,block,reg_has_got,litpool_confidence,block_candidate_dependency_edge,segment_target_range,next_end,data_in_code_propagate,reg_def_use.used_in_block,reg_def_use.used,reg_def_use.last_def_in_block,arm_jump_table_block_instruction,__agg_subclause2,tls_get_addr,wis_prior,def_used_for_address,jump_table_target,initialized_data_segment,reg_def_use.live_var_def,__agg_subclause3,split_load_operand,call_tls_get_addr,instruction_memory_access_size,relocation_adjustment,reg_def_use.return_val_used,basic_target,fallthrough_over_padding,call_tls_get_addr_mips,hi_load_prop,padding_block_limit,compare_and_jump_indirect_op_valid,__agg_single3,tls_relative_operand_mips,block_points_proportional,__agg_single10,reg_reg_arithmetic_operation_defs,arm_jump_table_block_start,adrp_used,after_end,init_ldr_add_pc,base_relative_operand,plt_block,known_block,start_function,cinf_ldr_add_pc,tls_desc_call,call_may_fallthrough_inter,common_tail,no_return_call_refined,incomplete_block,base_relative_jump,block_next,overlap_with_litpool,reg_def_use.ambiguous_last_def_in_block,stack_def_use.live_var_used,wis_schedule_iter,first_block_in_byte_interval,reg_def_use.def_used,split_load,no_return_block,value_reg,reg_def_use.live_var_used,code_in_block_candidate,wis_memo,call_target_has_other_fallthrough_inter,correlated_live_reg,cmp_reg_to_reg,reg_def_use.flow_def,arm_jump_table_candidate_start,block_boundaries,indefinite_litpool_ref,reg_def_use.return_block_end,compare_and_jump_register,resolved_reaches,data_block_candidate,block_candidate_boundaries,cmp_defines,unresolved_interval,reg_def_use.live_var_at_block_end,padding_block_candidate,straight_line_last_def,wis_has_prior,reg_def_use.defined_in_block,unresolved_interval_order,block_total_points,next_type,stack_def_use.defined_in_block,data_block_limit,inferred_main_in_reg,candidate_block_is_not_padding,arm_jump_table_candidate,arch.reg_relative_load,stack_def_use.used_in_block,inferred_main_dispatch,code_in_block_candidate_refined,local_dynamic_tls_candidate,jump_table_start,impossible_block,stack_def_use.live_var_def,split_load_conflict,invalid_jump_table_candidate,litpool_ref,data_in_code,stack_def_use.live_var_at_prior_used,value_reg_edge,jump_table_max,base_relative_operation,composite_data_access_candidate,stack_def_use.ref_in_block,indexed_pc_relative_load_relative,discarded_split_load,stack_base_reg_move,reg_has_base_image,compare_and_jump_indirect,plt_entry,arch.simple_data_load,jump_table_candidate_refined,reg_def_use.live_var_at_prior_used,no_return_call,initial_function_containing_return
- invalid_jump_table_candidate(DataEA:address, DataSize:unsigned)
A jump table data entry is overlapped by code
Uses:
arch.instruction_at,instruction,max_instruction_sizeRecursive:
invalid,__agg_single6,next_block_in_byte_interval,must_fallthrough,split_load_for_symbolization,block_points,relative_address_start,split_load_point,possible_target,block_instruction_next,self_contained_segment,data_access,__agg_subclause7,unresolved_block_overlap,reg_def_use.ambiguous_block_last_def,stack_def_use.live_var_used_in_block,split_load_total_points,likely_fallthrough,stack_def_use.block_last_def,code_in_block,const_value_reg_used,possible_target_from,arm_jump_table_data_block,block_heuristic,symbolic_expr_from_relocation,flags_and_jump_pair,litpool_boundaries,block_limit,got_relative_operand,simple_data_access_pattern,block_implies_block,discarded_block,contains_plausible_instr_seq,split_load_candidate,next_function_entry_initial,gp_relative_operand,wis_schedule,arm_jump_table_data_block_limit,contains_implausible_instr_seq,value_reg_limit,arm_jump_table_cmp_limit,block_overlap,overlapping_instruction,arm_jump_table_skip_first_entry,function_inference.function_entry_initial,inter_procedural_edge,jump_table_element_access,stack_def_use.live_var_at_block_end,data_segment,reg_used_for,arch.extend_load,transition_block_limit,straight_line_def_used,unlikely_have_symbolic_immediate,relative_address,relocation_adjustment_total,stack_def_use.def_used,reg_def_use.block_last_def,symbol_minus_symbol_litpool_access_pattern,jump_table_signed,__agg_single2,stack_def_use.last_def_in_block,value_reg_unsupported,relative_jump_table_entry_candidate,last_value_reg_limit,jump_table_candidate,nop_in_padding_candidate,no_value_reg_limit,negative_block_heuristic,init_symbol_minus_symbol_candidate_arm,next_start,__agg_subclause4,compare_and_jump_immediate,may_fallthrough,indexed_pc_relative_load,branch_to_calculated_pc_rel_addr,candidate_block_is_padding,jump_table_prelude,is_padding,__agg_subclause6,litpool_symbolic_operand,no_return_call_propagated,adjusts_stack_in_block,unresolved_block,reg_def_use.ref_in_block,block_last_instruction,block,reg_has_got,litpool_confidence,block_candidate_dependency_edge,segment_target_range,next_end,data_in_code_propagate,reg_def_use.used_in_block,reg_def_use.used,reg_def_use.last_def_in_block,arm_jump_table_block_instruction,__agg_subclause2,tls_get_addr,wis_prior,def_used_for_address,jump_table_target,initialized_data_segment,reg_def_use.live_var_def,__agg_subclause3,split_load_operand,call_tls_get_addr,instruction_memory_access_size,relocation_adjustment,reg_def_use.return_val_used,basic_target,fallthrough_over_padding,call_tls_get_addr_mips,hi_load_prop,padding_block_limit,compare_and_jump_indirect_op_valid,__agg_single3,tls_relative_operand_mips,block_points_proportional,__agg_single10,reg_reg_arithmetic_operation_defs,arm_jump_table_block_start,adrp_used,after_end,init_ldr_add_pc,base_relative_operand,plt_block,known_block,start_function,cinf_ldr_add_pc,tls_desc_call,call_may_fallthrough_inter,common_tail,no_return_call_refined,incomplete_block,base_relative_jump,block_next,overlap_with_litpool,reg_def_use.ambiguous_last_def_in_block,stack_def_use.live_var_used,wis_schedule_iter,first_block_in_byte_interval,reg_def_use.def_used,split_load,no_return_block,value_reg,reg_def_use.live_var_used,code_in_block_candidate,wis_memo,call_target_has_other_fallthrough_inter,correlated_live_reg,cmp_reg_to_reg,reg_def_use.flow_def,arm_jump_table_candidate_start,block_boundaries,indefinite_litpool_ref,reg_def_use.return_block_end,compare_and_jump_register,resolved_reaches,data_block_candidate,block_candidate_boundaries,cmp_defines,unresolved_interval,reg_def_use.live_var_at_block_end,padding_block_candidate,straight_line_last_def,wis_has_prior,reg_def_use.defined_in_block,unresolved_interval_order,block_total_points,next_type,stack_def_use.defined_in_block,data_block_limit,inferred_main_in_reg,candidate_block_is_not_padding,arm_jump_table_candidate,arch.reg_relative_load,stack_def_use.used_in_block,inferred_main_dispatch,code_in_block_candidate_refined,local_dynamic_tls_candidate,jump_table_start,impossible_block,stack_def_use.live_var_def,split_load_conflict,invalid_jump_table_candidate,litpool_ref,data_in_code,stack_def_use.live_var_at_prior_used,value_reg_edge,jump_table_max,base_relative_operation,composite_data_access_candidate,stack_def_use.ref_in_block,indexed_pc_relative_load_relative,discarded_split_load,stack_base_reg_move,reg_has_base_image,compare_and_jump_indirect,plt_entry,arch.simple_data_load,jump_table_candidate_refined,reg_def_use.live_var_at_prior_used,no_return_call,initial_function_containing_return
- jump_table_candidate_refined(EA:address, DataEA:address, TargetEA:address)
Subset of jump_table_candidate that appears to be valid after code inference.
Attributes:
EA: The address of the instruction from which the jump occurs.
DataEA: The address at which the actual data entry of the jump table resides.
TargetEA: The target of the jump.
Used by:
block_needs_splitting_at,resolved_transferRecursive:
invalid,__agg_single6,next_block_in_byte_interval,must_fallthrough,split_load_for_symbolization,block_points,relative_address_start,split_load_point,possible_target,block_instruction_next,self_contained_segment,data_access,__agg_subclause7,unresolved_block_overlap,reg_def_use.ambiguous_block_last_def,stack_def_use.live_var_used_in_block,split_load_total_points,likely_fallthrough,stack_def_use.block_last_def,code_in_block,const_value_reg_used,possible_target_from,arm_jump_table_data_block,block_heuristic,symbolic_expr_from_relocation,flags_and_jump_pair,litpool_boundaries,block_limit,got_relative_operand,simple_data_access_pattern,block_implies_block,discarded_block,contains_plausible_instr_seq,split_load_candidate,next_function_entry_initial,gp_relative_operand,wis_schedule,arm_jump_table_data_block_limit,contains_implausible_instr_seq,value_reg_limit,arm_jump_table_cmp_limit,block_overlap,overlapping_instruction,arm_jump_table_skip_first_entry,function_inference.function_entry_initial,inter_procedural_edge,jump_table_element_access,stack_def_use.live_var_at_block_end,data_segment,reg_used_for,arch.extend_load,transition_block_limit,straight_line_def_used,unlikely_have_symbolic_immediate,relative_address,relocation_adjustment_total,stack_def_use.def_used,reg_def_use.block_last_def,symbol_minus_symbol_litpool_access_pattern,jump_table_signed,__agg_single2,stack_def_use.last_def_in_block,value_reg_unsupported,relative_jump_table_entry_candidate,last_value_reg_limit,jump_table_candidate,nop_in_padding_candidate,no_value_reg_limit,negative_block_heuristic,init_symbol_minus_symbol_candidate_arm,next_start,__agg_subclause4,compare_and_jump_immediate,may_fallthrough,indexed_pc_relative_load,branch_to_calculated_pc_rel_addr,candidate_block_is_padding,jump_table_prelude,is_padding,__agg_subclause6,litpool_symbolic_operand,no_return_call_propagated,adjusts_stack_in_block,unresolved_block,reg_def_use.ref_in_block,block_last_instruction,block,reg_has_got,litpool_confidence,block_candidate_dependency_edge,segment_target_range,next_end,data_in_code_propagate,reg_def_use.used_in_block,reg_def_use.used,reg_def_use.last_def_in_block,arm_jump_table_block_instruction,__agg_subclause2,tls_get_addr,wis_prior,def_used_for_address,jump_table_target,initialized_data_segment,reg_def_use.live_var_def,__agg_subclause3,split_load_operand,call_tls_get_addr,instruction_memory_access_size,relocation_adjustment,reg_def_use.return_val_used,basic_target,fallthrough_over_padding,call_tls_get_addr_mips,hi_load_prop,padding_block_limit,compare_and_jump_indirect_op_valid,__agg_single3,tls_relative_operand_mips,block_points_proportional,__agg_single10,reg_reg_arithmetic_operation_defs,arm_jump_table_block_start,adrp_used,after_end,init_ldr_add_pc,base_relative_operand,plt_block,known_block,start_function,cinf_ldr_add_pc,tls_desc_call,call_may_fallthrough_inter,common_tail,no_return_call_refined,incomplete_block,base_relative_jump,block_next,overlap_with_litpool,reg_def_use.ambiguous_last_def_in_block,stack_def_use.live_var_used,wis_schedule_iter,first_block_in_byte_interval,reg_def_use.def_used,split_load,no_return_block,value_reg,reg_def_use.live_var_used,code_in_block_candidate,wis_memo,call_target_has_other_fallthrough_inter,correlated_live_reg,cmp_reg_to_reg,reg_def_use.flow_def,arm_jump_table_candidate_start,block_boundaries,indefinite_litpool_ref,reg_def_use.return_block_end,compare_and_jump_register,resolved_reaches,data_block_candidate,block_candidate_boundaries,cmp_defines,unresolved_interval,reg_def_use.live_var_at_block_end,padding_block_candidate,straight_line_last_def,wis_has_prior,reg_def_use.defined_in_block,unresolved_interval_order,block_total_points,next_type,stack_def_use.defined_in_block,data_block_limit,inferred_main_in_reg,candidate_block_is_not_padding,arm_jump_table_candidate,arch.reg_relative_load,stack_def_use.used_in_block,inferred_main_dispatch,code_in_block_candidate_refined,local_dynamic_tls_candidate,jump_table_start,impossible_block,stack_def_use.live_var_def,split_load_conflict,invalid_jump_table_candidate,litpool_ref,data_in_code,stack_def_use.live_var_at_prior_used,value_reg_edge,jump_table_max,base_relative_operation,composite_data_access_candidate,stack_def_use.ref_in_block,indexed_pc_relative_load_relative,discarded_split_load,stack_base_reg_move,reg_has_base_image,compare_and_jump_indirect,plt_entry,arch.simple_data_load,jump_table_candidate_refined,reg_def_use.live_var_at_prior_used,no_return_call,initial_function_containing_return
- jump_table_target(EA:address, Dest:address)
CFG edges formed by jump tables using the best available information during value analysis.
Attributes:
EA: address where the jump occurs
Dest: a potential destintation address
Recursive:
invalid,__agg_single6,next_block_in_byte_interval,must_fallthrough,split_load_for_symbolization,block_points,relative_address_start,split_load_point,possible_target,block_instruction_next,self_contained_segment,data_access,__agg_subclause7,unresolved_block_overlap,reg_def_use.ambiguous_block_last_def,stack_def_use.live_var_used_in_block,split_load_total_points,likely_fallthrough,stack_def_use.block_last_def,code_in_block,const_value_reg_used,possible_target_from,arm_jump_table_data_block,block_heuristic,symbolic_expr_from_relocation,flags_and_jump_pair,litpool_boundaries,block_limit,got_relative_operand,simple_data_access_pattern,block_implies_block,discarded_block,contains_plausible_instr_seq,split_load_candidate,next_function_entry_initial,gp_relative_operand,wis_schedule,arm_jump_table_data_block_limit,contains_implausible_instr_seq,value_reg_limit,arm_jump_table_cmp_limit,block_overlap,overlapping_instruction,arm_jump_table_skip_first_entry,function_inference.function_entry_initial,inter_procedural_edge,jump_table_element_access,stack_def_use.live_var_at_block_end,data_segment,reg_used_for,arch.extend_load,transition_block_limit,straight_line_def_used,unlikely_have_symbolic_immediate,relative_address,relocation_adjustment_total,stack_def_use.def_used,reg_def_use.block_last_def,symbol_minus_symbol_litpool_access_pattern,jump_table_signed,__agg_single2,stack_def_use.last_def_in_block,value_reg_unsupported,relative_jump_table_entry_candidate,last_value_reg_limit,jump_table_candidate,nop_in_padding_candidate,no_value_reg_limit,negative_block_heuristic,init_symbol_minus_symbol_candidate_arm,next_start,__agg_subclause4,compare_and_jump_immediate,may_fallthrough,indexed_pc_relative_load,branch_to_calculated_pc_rel_addr,candidate_block_is_padding,jump_table_prelude,is_padding,__agg_subclause6,litpool_symbolic_operand,no_return_call_propagated,adjusts_stack_in_block,unresolved_block,reg_def_use.ref_in_block,block_last_instruction,block,reg_has_got,litpool_confidence,block_candidate_dependency_edge,segment_target_range,next_end,data_in_code_propagate,reg_def_use.used_in_block,reg_def_use.used,reg_def_use.last_def_in_block,arm_jump_table_block_instruction,__agg_subclause2,tls_get_addr,wis_prior,def_used_for_address,jump_table_target,initialized_data_segment,reg_def_use.live_var_def,__agg_subclause3,split_load_operand,call_tls_get_addr,instruction_memory_access_size,relocation_adjustment,reg_def_use.return_val_used,basic_target,fallthrough_over_padding,call_tls_get_addr_mips,hi_load_prop,padding_block_limit,compare_and_jump_indirect_op_valid,__agg_single3,tls_relative_operand_mips,block_points_proportional,__agg_single10,reg_reg_arithmetic_operation_defs,arm_jump_table_block_start,adrp_used,after_end,init_ldr_add_pc,base_relative_operand,plt_block,known_block,start_function,cinf_ldr_add_pc,tls_desc_call,call_may_fallthrough_inter,common_tail,no_return_call_refined,incomplete_block,base_relative_jump,block_next,overlap_with_litpool,reg_def_use.ambiguous_last_def_in_block,stack_def_use.live_var_used,wis_schedule_iter,first_block_in_byte_interval,reg_def_use.def_used,split_load,no_return_block,value_reg,reg_def_use.live_var_used,code_in_block_candidate,wis_memo,call_target_has_other_fallthrough_inter,correlated_live_reg,cmp_reg_to_reg,reg_def_use.flow_def,arm_jump_table_candidate_start,block_boundaries,indefinite_litpool_ref,reg_def_use.return_block_end,compare_and_jump_register,resolved_reaches,data_block_candidate,block_candidate_boundaries,cmp_defines,unresolved_interval,reg_def_use.live_var_at_block_end,padding_block_candidate,straight_line_last_def,wis_has_prior,reg_def_use.defined_in_block,unresolved_interval_order,block_total_points,next_type,stack_def_use.defined_in_block,data_block_limit,inferred_main_in_reg,candidate_block_is_not_padding,arm_jump_table_candidate,arch.reg_relative_load,stack_def_use.used_in_block,inferred_main_dispatch,code_in_block_candidate_refined,local_dynamic_tls_candidate,jump_table_start,impossible_block,stack_def_use.live_var_def,split_load_conflict,invalid_jump_table_candidate,litpool_ref,data_in_code,stack_def_use.live_var_at_prior_used,value_reg_edge,jump_table_max,base_relative_operation,composite_data_access_candidate,stack_def_use.ref_in_block,indexed_pc_relative_load_relative,discarded_split_load,stack_base_reg_move,reg_has_base_image,compare_and_jump_indirect,plt_entry,arch.simple_data_load,jump_table_candidate_refined,reg_def_use.live_var_at_prior_used,no_return_call,initial_function_containing_return