Skip to content

B
binwalk
Commit dff54572 by devttys0
Options

Updated VxWorks symbol table signatures

parent 2c50877d
Showing with 28 additions and 17 deletions
src/binwalk/magic/vxworks
# Signatures to identify the start of a VxWorks symbol table # Signatures to identify the start of a VxWorks symbol table
8 string \x00\x00\x05\x00\x00\x00\x00\x00 VxWorks symbol table, big endian,{overlap} # The jump is necessary to ensure that we don't accidentally
# report a big endian symbol table followed immediately by a
# little endian symbol table. We only want to show the beginning
# of the symbol table, so use the once keyword too.
8 string \x00\x00\x05 VxWorks symbol table, big endian,{overlap}{once}{jump:156}
>11 string !\x00\x00\x00\x00\x00 {invalid}
>4 belong 0 {invalid} >4 belong 0 {invalid}
>4 ubelong x first entry: [type: function, code address: 0x%X, >4 ubelong x first entry: [type: function, code address: 0x%X,
>0 belong 0 {invalid} >0 belong 0 {invalid}
>0 ubelong x symbol address: 0x%X]{once} >0 ubelong x symbol address: 0x%X]
>24 belong !0x500 >24 belong !0x500
>>24 belong !0x700 >>24 belong !0x700
>>>24 belong !0x900 \b, {invalid} >>>24 belong !0x900 \b, {invalid}
...@@ -33,11 +38,12 @@ ...@@ -33,11 +38,12 @@
>>152 belong !0x700 >>152 belong !0x700
>>>152 belong !0x900 \b, {invalid} >>>152 belong !0x900 \b, {invalid}
8 string \x00\x00\x07\x00\x00\x00\x00\x00 VxWorks symbol table, big endian,{overlap} 8 string \x00\x00\x07 VxWorks symbol table, big endian,{once}{jump:156}
>11 string !\x00\x00\x00\x00\x00 {invalid}
>4 belong 0 {invalid} >4 belong 0 {invalid}
>4 ubelong x first entry: [type: initialized data, code address: 0x%X, >4 ubelong x first entry: [type: initialized data, code address: 0x%X,
>0 belong 0 {invalid} >0 belong 0 {invalid}
>0 ubelong x symbol address: 0x%X]{once} >0 ubelong x symbol address: 0x%X]
>24 belong !0x500 >24 belong !0x500
>>24 belong !0x700 >>24 belong !0x700
>>>24 belong !0x900 \b, {invalid} >>>24 belong !0x900 \b, {invalid}
...@@ -66,11 +72,12 @@ ...@@ -66,11 +72,12 @@
>>152 belong !0x700 >>152 belong !0x700
>>>152 belong !0x900 \b, {invalid} >>>152 belong !0x900 \b, {invalid}
8 string \x00\x00\x09\x00\x00\x00\x00\x00 VxWorks symbol table, big endian,{overlap} 8 string \x00\x00\x09 VxWorks symbol table, big endian,{once}{jump:156}
>11 string !\x00\x00\x00\x00\x00 {invalid}
>4 belong 0 {invalid} >4 belong 0 {invalid}
>4 ubelong x first entry: [type: uninitialized data, code address: 0x%X, >4 ubelong x first entry: [type: uninitialized data, code address: 0x%X,
>0 belong 0 {invalid} >0 belong 0 {invalid}
>0 ubelong x symbol address: 0x%X]{once} >0 ubelong x symbol address: 0x%X]
>24 belong !0x500 >24 belong !0x500
>>24 belong !0x700 >>24 belong !0x700
>>>24 belong !0x900 \b, {invalid} >>>24 belong !0x900 \b, {invalid}
...@@ -99,11 +106,12 @@ ...@@ -99,11 +106,12 @@
>>152 belong !0x700 >>152 belong !0x700
>>>152 belong !0x900 \b, {invalid} >>>152 belong !0x900 \b, {invalid}
8 string \x00\x05\x00\x00\x00\x00\x00\x00 VxWorks symbol table, little endian,{overlap} 8 string \x00\x05 VxWorks symbol table, little endian,{once}{jump:156}
>11 string !\x00\x00\x00\x00\x00\x00 {invalid}
>4 lelong 0 {invalid} >4 lelong 0 {invalid}
>4 ulelong x first entry: [type: function, code address: 0x%X, >4 ulelong x first entry: [type: function, code address: 0x%X,
>0 lelong 0 {invalid} >0 lelong 0 {invalid}
>0 ulelong x symbol address: 0x%X]{once} >0 ulelong x symbol address: 0x%X]
>24 lelong !0x500 >24 lelong !0x500
>>24 lelong !0x700 >>24 lelong !0x700
>>>24 lelong !0x900 \b, {invalid} >>>24 lelong !0x900 \b, {invalid}
...@@ -132,11 +140,12 @@ ...@@ -132,11 +140,12 @@
>>152 lelong !0x700 >>152 lelong !0x700
>>>152 lelong !0x900 \b, {invalid} >>>152 lelong !0x900 \b, {invalid}
8 string \x00\x07\x00\x00\x00\x00\x00\x00 VxWorks symbol table, little endian,{overlap} 8 string \x00\x07 VxWorks symbol table, little endian,{once}{jump:156}
>11 string !\x00\x00\x00\x00\x00\x00 {invalid}
>4 lelong 0 {invalid} >4 lelong 0 {invalid}
>4 ulelong x first entry: [type: initialized data, code address: 0x%X, >4 ulelong x first entry: [type: initialized data, code address: 0x%X,
>0 lelong 0 {invalid} >0 lelong 0 {invalid}
>0 ulelong x symbol address: 0x%X]{once} >0 ulelong x symbol address: 0x%X]
>24 lelong !0x500 >24 lelong !0x500
>>24 lelong !0x700 >>24 lelong !0x700
>>>24 lelong !0x900 \b, {invalid} >>>24 lelong !0x900 \b, {invalid}
...@@ -165,11 +174,12 @@ ...@@ -165,11 +174,12 @@
>>152 lelong !0x700 >>152 lelong !0x700
>>>152 lelong !0x900 \b, {invalid} >>>152 lelong !0x900 \b, {invalid}
8 string \x00\x09\x00\x00\x00\x00\x00\x00 VxWorks symbol table, little endian,{overlap} 8 string \x00\x09 VxWorks symbol table, little endian,{once}{jump:156}
>11 string !\x00\x00\x00\x00\x00\x00 {invalid}
>4 lelong 0 {invalid} >4 lelong 0 {invalid}
>4 ulelong x first entry: [type: uninitialized data, code address: 0x%X, >4 ulelong x first entry: [type: uninitialized data, code address: 0x%X,
>0 lelong 0 {invalid} >0 lelong 0 {invalid}
>0 ulelong x symbol address: 0x%X]{once} >0 ulelong x symbol address: 0x%X]
>24 lelong !0x500 >24 lelong !0x500
>>24 lelong !0x700 >>24 lelong !0x700
>>>24 lelong !0x900 \b, {invalid} >>>24 lelong !0x900 \b, {invalid}
......
src/binwalk/modules/entropy.py
...@@ -23,8 +23,8 @@ class Entropy(Module): ...@@ -23,8 +23,8 @@ class Entropy(Module):
DEFAULT_BLOCK_SIZE = 1024 DEFAULT_BLOCK_SIZE = 1024
DEFAULT_DATA_POINTS = 2048 DEFAULT_DATA_POINTS = 2048
DEFAULT_TRIGGER_HIGH = 0.95 DEFAULT_TRIGGER_HIGH = .95
DEFAULT_TRIGGER_LOW = 0.85 DEFAULT_TRIGGER_LOW = .85
TITLE = "Entropy Analysis" TITLE = "Entropy Analysis"
ORDER = 8 ORDER = 8
...@@ -244,9 +244,10 @@ class Entropy(Module): ...@@ -244,9 +244,10 @@ class Entropy(Module):
plt = pg.plot(title=fname, clear=True) plt = pg.plot(title=fname, clear=True)
# Disable auto-ranging, as it can cause some very un-intuitive graphs, # Disable auto-ranging of the Y (entropy) axis, as it
# particularly for files with only high-entropy data. # can cause some very un-intuitive graphs, particularly
plt.disableAutoRange() #for files with only high-entropy data.
plt.setYRange(0, 8)
if self.show_legend and has_key(self.file_markers, fname): if self.show_legend and has_key(self.file_markers, fname):
plt.addLegend(size=(self.max_description_length*10, 0)) plt.addLegend(size=(self.max_description_length*10, 0))
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment