vasilito
cb424d7448
verify-patch-sanity.py validates every active recipe .patch has internally- consistent hunk line counts — catching the 'malformed patch at line N' failure at commit/CI/preflight time instead of hours into a cook. This cycle hit that class three times (qtwaylandscanner, sddm, xwayland), each only discovered when cookbook tried to apply the patch. Running it across the repo found 29 latent malformed patches (validated against GNU patch: e.g. relibc/P3-sysv-ipc reproduces 'malformed patch at line 22'). They were harmless only because they sit in vendored recipes (baked, not re- applied) — but would fail on any version-bump re-derivation. --fix recounts the hunk headers (body untouched) and repaired all 29. Wired into build-preflight.sh (Phase 1.0D) and redbear-ci.yml, with a unit test (test-patch-sanity.sh). Skips archived/legacy trees and unvalidatable formats (empty placeholders, bare-@@ git hunks).
55 lines
1.4 KiB
Python
Executable File
55 lines
1.4 KiB
Python
Executable File
#!/usr/bin/env python
|
|
|
|
"""A tool for looking for indirect jumps and calls in x86 binaries.
|
|
|
|
Helpful to verify whether or not retpoline mitigations are catching
|
|
all of the indirect branches in a binary and telling you which
|
|
functions the remaining ones are in (assembly, etc).
|
|
|
|
Depends on llvm-objdump being in your path and is tied to the
|
|
dump format.
|
|
"""
|
|
|
|
from __future__ import print_function
|
|
|
|
import os
|
|
import sys
|
|
import re
|
|
import subprocess
|
|
import optparse
|
|
|
|
# Look for indirect calls/jmps in a binary. re: (call|jmp).*\*
|
|
def look_for_indirect(file):
|
|
args = ["llvm-objdump"]
|
|
args.extend(["-d"])
|
|
args.extend([file])
|
|
|
|
p = subprocess.Popen(
|
|
args=args, stdin=None, stderr=subprocess.PIPE, stdout=subprocess.PIPE
|
|
)
|
|
(stdout, stderr) = p.communicate()
|
|
|
|
function = ""
|
|
for line in stdout.splitlines():
|
|
if not line.startswith(" "):
|
|
function = line
|
|
result = re.search("(call|jmp).*\*", line)
|
|
if result is not None:
|
|
# TODO: Perhaps use cxxfilt to demangle functions?
|
|
print(function)
|
|
print(line)
|
|
return
|
|
|
|
|
|
def main(args):
|
|
# No options currently other than the binary.
|
|
parser = optparse.OptionParser("%prog [options] <binary>")
|
|
(opts, args) = parser.parse_args(args)
|
|
if len(args) != 2:
|
|
parser.error("invalid number of arguments: %s" % len(args))
|
|
look_for_indirect(args[1])
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main(sys.argv)
|