J. A. Herdman

16 papers C 1Journal 6Unranked 9
YearRankTypeTitle / Venue / Authors
2015 C conf
CLUSTER
Robert F. Bird, Patrick Gillies, Michael R. Bareford, J. A. Herdman, Stephen A. Jarvis
2014 conf
WACCPD@SC
J. A. Herdman, W. P. Gaudin, Oliver Perks, D. A. Beckingsale, A. C. Mallinson, Stephen A. Jarvis
2014 conf
PGAS
A. C. Mallinson, Stephen A. Jarvis, W. P. Gaudin, J. A. Herdman
2014 conf
PMBS@SC
Gihan R. Mudalige, I. Z. Reguly, Michael B. Giles, A. C. Mallinson, W. P. Gaudin, J. A. Herdman
2013 J jnl
J. Parallel Distributed Comput.
Simon J. Pennycook, Simon D. Hammond, Steven A. Wright, J. A. Herdman, I. Miller, Stephen A. Jarvis
2013 conf
HPCS
O. F. J. Perks, D. A. Beckingsale, A. S. Dawes, J. A. Herdman, Cyril Mazauric, Stephen A. Jarvis
2013 J jnl
Comput. J.
Steven A. Wright, Simon D. Hammond, Simon J. Pennycook, Robert F. Bird, J. A. Herdman, I. Miller, A. Vadgama, Abhir H. Bhalerao, Stephen A. Jarvis
2013 J jnl
Comput. J.
O. F. J. Perks, D. A. Beckingsale, Simon D. Hammond, I. Miller, J. A. Herdman, A. Vadgama, Abhir H. Bhalerao, Ligang He, Stephen A. Jarvis
2012 conf
SC Companion
J. A. Herdman, W. P. Gaudin, Simon McIntosh-Smith, Michael Boulton, D. A. Beckingsale, A. C. Mallinson, Stephen A. Jarvis
2012 conf
IPDPS Workshops
Steven A. Wright, Simon D. Hammond, Simon J. Pennycook, I. Miller, J. A. Herdman, Stephen A. Jarvis
2012 conf
EPEW/UKPEW
D. A. Beckingsale, O. F. J. Perks, W. P. Gaudin, J. A. Herdman, Stephen A. Jarvis
2011 J jnl
SIGMETRICS Perform. Evaluation Rev.
J. A. Herdman, W. P. Gaudin, David Turland, Simon D. Hammond
2011 J jnl
Comput. Sci. Res. Dev.
J. A. Davis, Gihan R. Mudalige, Simon D. Hammond, J. A. Herdman, I. Miller, Stephen A. Jarvis
2010 conf
IPDPS Workshops
Simon D. Hammond, Gihan R. Mudalige, J. A. Smith, J. A. Davis, Stephen A. Jarvis, J. Holt, I. Miller, J. A. Herdman, A. Vadgama
2009 J jnl
IET Softw.
Simon D. Hammond, Gihan R. Mudalige, J. A. Smith, J. A. Davis, A. B. Mills, Stephen A. Jarvis, J. Holt, I. Miller, J. A. Herdman, A. Vadgama
2009 conf
SimuTools
Simon D. Hammond, Gihan R. Mudalige, J. A. Smith, Stephen A. Jarvis, J. A. Herdman, A. Vadgama
redb/extractors/decompiler/bninja/analysis/medium_level.py
← Index redb/extractors/decompiler/bninja/analysis/medium_level.py python
import time

from binaryninja import (
    MediumLevelILOperation as MLIL_OP,
)

try:
    from ..function_type import FunctionTypeAnalysis
    from ..similarity.minhasher import MinHasher, TokenKind
    from ..utils.hashes import calculate_sha256, calculate_tlsh
    from .medium_level_normalization import MediumLevelNormalization
except ImportError:
    from redb.extractors.decompiler.bninja.analysis.medium_level_normalization import MediumLevelNormalization
    from redb.extractors.decompiler.bninja.similarity.minhasher import MinHasher
    from redb.extractors.decompiler.bninja.function_type import FunctionTypeAnalysis
    from redb.extractors.decompiler.bninja.utils.hashes import calculate_sha256, calculate_tlsh


_MLIL_CALL_OPS = (
    MLIL_OP.MLIL_CALL,
    MLIL_OP.MLIL_CALL_SSA,
    MLIL_OP.MLIL_CALL_UNTYPED,
    MLIL_OP.MLIL_CALL_UNTYPED_SSA,
    MLIL_OP.MLIL_TAILCALL,
    MLIL_OP.MLIL_TAILCALL_SSA,
    MLIL_OP.MLIL_TAILCALL_UNTYPED,
    MLIL_OP.MLIL_TAILCALL_UNTYPED_SSA,
)

_MLIL_CONTROL_FLOW_OPS = (
    MLIL_OP.MLIL_IF,
    MLIL_OP.MLIL_GOTO,
    MLIL_OP.MLIL_JUMP,
    MLIL_OP.MLIL_JUMP_TO,
    MLIL_OP.MLIL_RET,
    MLIL_OP.MLIL_RET_HINT,
    MLIL_OP.MLIL_NORET,
) + _MLIL_CALL_OPS


class MediumLevelAnalysis:
    def __init__(self, function, bv, logger):
        self.function = function
        self.name = function.name
        self.start = function.start
        self.mlil_func = function.mlil
        self.bv = bv
        self.logger = logger
        self.errors = []

    def log_error(self, message, function_name, address, exception=None, error_location="unknown"):
        error_msg = f"Error in function {function_name} at {address}: {message}"
        if exception:
            error_msg += f" - {str(exception)}"
        self.logger.error(error_msg)

        error = {
            "function_name": function_name,
            "function_address": str(address),
            "error_location": error_location,
            "error_message": message,
            "error_details": str(exception) if exception else "",
            "error_type": type(exception).__name__ if exception else "Unknown",
            "timestamp": int(time.time() * 1000),
        }
        self.errors.append(error)

    def _collect_mlil_skeleton_and_typed(self):
        mlil = self.mlil_func
        if not mlil:
            return [], [], [], []

        start = self.start
        norm = MediumLevelNormalization()

        skeleton = []
        skeleton_with_addr = []
        typed = []
        typed_with_addr = []

        for il in mlil.instructions:
            skel_norm = norm.normalize_instruction_all_levels(il)
            typed_norm = norm.normalize_instr_with_operands(il)

            skeleton.append(skel_norm)
            typed.append(typed_norm)

            offset = il.address - start
            if offset < 0:
                offset = 0

            skeleton_with_addr.append((offset, skel_norm))
            typed_with_addr.append((offset, typed_norm))

        return skeleton, skeleton_with_addr, typed, typed_with_addr

    def analyze(self):
        (
            instr_skeleton,
            body_mlil_skeleton_vector,
            instr_typed,
            body_mlil_typed_vector,
        ) = self._collect_mlil_skeleton_and_typed()

        instr_skeleton_str = str(instr_skeleton)
        sha256_skeleton = calculate_sha256(instr_skeleton_str)
        tlsh_skeleton = calculate_tlsh(instr_skeleton_str)

        instr_typed_str = str(instr_typed)
        sha256_typed = calculate_sha256(instr_typed_str)
        tlsh_typed = calculate_tlsh(instr_typed_str)

        seed = 0xdeadbeef
        minhash_mlil_skeleton = MinHasher(seed, self.mlil_func, TokenKind.MLIL).calculateMinHash()
        minhash_mlil_typed = MinHasher(seed, self.mlil_func, TokenKind.TYPED_MLIL).calculateMinHash()

        medium_level_json = {
            "function_address": self.start,
            "body_mlil_skeleton_vector": body_mlil_skeleton_vector,
            "sha256_mlil_skeleton": sha256_skeleton,
            "tlsh_mlil_skeleton": tlsh_skeleton,
            "minhash_mlil_skeleton": minhash_mlil_skeleton,
            "body_mlil_typed_vector": body_mlil_typed_vector,
            "sha256_mlil_typed": sha256_typed,
            "tlsh_mlil_typed": tlsh_typed,
            "minhash_mlil_typed": minhash_mlil_typed,
        }

        return medium_level_json, self.errors