Skip to content

B
binwalk
Commit dff54572 by devttys0
Options

Updated VxWorks symbol table signatures

parent 2c50877d
Showing with 28 additions and 17 deletions
src/binwalk/magic/vxworks
# Signatures to identify the start of a VxWorks symbol table
8 string \x00\x00\x05\x00\x00\x00\x00\x00 VxWorks symbol table, big endian,{overlap}
# The jump is necessary to ensure that we don't accidentally
# report a big endian symbol table followed immediately by a
# little endian symbol table. We only want to show the beginning
# of the symbol table, so use the once keyword too.
8 string \x00\x00\x05 VxWorks symbol table, big endian,{overlap}{once}{jump:156}
>11 string !\x00\x00\x00\x00\x00 {invalid}
>4 belong 0 {invalid}
>4 ubelong x first entry: [type: function, code address: 0x%X,
>0 belong 0 {invalid}
>0 ubelong x symbol address: 0x%X]{once}
>0 ubelong x symbol address: 0x%X]
>24 belong !0x500
>>24 belong !0x700
>>>24 belong !0x900 \b, {invalid}
......@@ -33,11 +38,12 @@
>>152 belong !0x700
>>>152 belong !0x900 \b, {invalid}
8 string \x00\x00\x07\x00\x00\x00\x00\x00 VxWorks symbol table, big endian,{overlap}
8 string \x00\x00\x07 VxWorks symbol table, big endian,{once}{jump:156}
>11 string !\x00\x00\x00\x00\x00 {invalid}
>4 belong 0 {invalid}
>4 ubelong x first entry: [type: initialized data, code address: 0x%X,
>0 belong 0 {invalid}
>0 ubelong x symbol address: 0x%X]{once}
>0 ubelong x symbol address: 0x%X]
>24 belong !0x500
>>24 belong !0x700
>>>24 belong !0x900 \b, {invalid}
......@@ -66,11 +72,12 @@
>>152 belong !0x700
>>>152 belong !0x900 \b, {invalid}
8 string \x00\x00\x09\x00\x00\x00\x00\x00 VxWorks symbol table, big endian,{overlap}
8 string \x00\x00\x09 VxWorks symbol table, big endian,{once}{jump:156}
>11 string !\x00\x00\x00\x00\x00 {invalid}
>4 belong 0 {invalid}
>4 ubelong x first entry: [type: uninitialized data, code address: 0x%X,
>0 belong 0 {invalid}
>0 ubelong x symbol address: 0x%X]{once}
>0 ubelong x symbol address: 0x%X]
>24 belong !0x500
>>24 belong !0x700
>>>24 belong !0x900 \b, {invalid}
......@@ -99,11 +106,12 @@
>>152 belong !0x700
>>>152 belong !0x900 \b, {invalid}
8 string \x00\x05\x00\x00\x00\x00\x00\x00 VxWorks symbol table, little endian,{overlap}
8 string \x00\x05 VxWorks symbol table, little endian,{once}{jump:156}
>11 string !\x00\x00\x00\x00\x00\x00 {invalid}
>4 lelong 0 {invalid}
>4 ulelong x first entry: [type: function, code address: 0x%X,
>0 lelong 0 {invalid}
>0 ulelong x symbol address: 0x%X]{once}
>0 ulelong x symbol address: 0x%X]
>24 lelong !0x500
>>24 lelong !0x700
>>>24 lelong !0x900 \b, {invalid}
......@@ -132,11 +140,12 @@
>>152 lelong !0x700
>>>152 lelong !0x900 \b, {invalid}
8 string \x00\x07\x00\x00\x00\x00\x00\x00 VxWorks symbol table, little endian,{overlap}
8 string \x00\x07 VxWorks symbol table, little endian,{once}{jump:156}
>11 string !\x00\x00\x00\x00\x00\x00 {invalid}
>4 lelong 0 {invalid}
>4 ulelong x first entry: [type: initialized data, code address: 0x%X,
>0 lelong 0 {invalid}
>0 ulelong x symbol address: 0x%X]{once}
>0 ulelong x symbol address: 0x%X]
>24 lelong !0x500
>>24 lelong !0x700
>>>24 lelong !0x900 \b, {invalid}
......@@ -165,11 +174,12 @@
>>152 lelong !0x700
>>>152 lelong !0x900 \b, {invalid}
8 string \x00\x09\x00\x00\x00\x00\x00\x00 VxWorks symbol table, little endian,{overlap}
8 string \x00\x09 VxWorks symbol table, little endian,{once}{jump:156}
>11 string !\x00\x00\x00\x00\x00\x00 {invalid}
>4 lelong 0 {invalid}
>4 ulelong x first entry: [type: uninitialized data, code address: 0x%X,
>0 lelong 0 {invalid}
>0 ulelong x symbol address: 0x%X]{once}
>0 ulelong x symbol address: 0x%X]
>24 lelong !0x500
>>24 lelong !0x700
>>>24 lelong !0x900 \b, {invalid}
......
src/binwalk/modules/entropy.py
......@@ -23,8 +23,8 @@ class Entropy(Module):
DEFAULT_BLOCK_SIZE = 1024
DEFAULT_DATA_POINTS = 2048
DEFAULT_TRIGGER_HIGH = 0.95
DEFAULT_TRIGGER_LOW = 0.85
DEFAULT_TRIGGER_HIGH = .95
DEFAULT_TRIGGER_LOW = .85
TITLE = "Entropy Analysis"
ORDER = 8
......@@ -244,9 +244,10 @@ class Entropy(Module):
plt = pg.plot(title=fname, clear=True)
# Disable auto-ranging, as it can cause some very un-intuitive graphs,
# particularly for files with only high-entropy data.
plt.disableAutoRange()
# Disable auto-ranging of the Y (entropy) axis, as it
# can cause some very un-intuitive graphs, particularly
#for files with only high-entropy data.
plt.setYRange(0, 8)
if self.show_legend and has_key(self.file_markers, fname):
plt.addLegend(size=(self.max_description_length*10, 0))
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment