Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add rust demangle script #10

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
57 changes: 57 additions & 0 deletions rust_demangler.py
Original file line number Diff line number Diff line change
@@ -0,0 +1,57 @@
# Demangle Rust function names
# A script can be easily created in the Script Manager window
# Make sure https://github.com/luser/rustfilt is installed on your system

#@author Thomas Roth
#@category Ghidra Ninja.Rust
#@keybinding
#@menupath
#@toolbar

from subprocess import Popen, PIPE
import re

from ghidra.program.model.symbol import *
from ghidra.program.model.listing import CodeUnit

functionManager = currentProgram.getFunctionManager()

fns = functionManager.getFunctions(True)
for f in fns:
f_name = f.getName()

# Is it a hash?
if not re.match(r"\bh[0-9a-f]{16}\b", f_name):
continue

signature = f.getComment()
signature = signature.replace("$LT$", "<")
signature = signature.replace("$GT$", ">")
signature = signature.replace("$u20$", " ")
signature = signature.replace("$C$", ",")
signature = signature.replace(".", ":")
signature = signature.replace(" ", "_")

f.setName(signature, SourceType.ANALYSIS)

# Get symbols
st = currentProgram.getSymbolTable();
symbols = st.getDefinedSymbols();
for f in symbols:
f_name = f.getName()

# Is it a mangled name?
if not (f_name.startswith("_ZN") or f_name.startswith("_R")):
continue

rustfilt = Popen(['rustfilt'], stdin=PIPE, stdout=PIPE)
signature = rustfilt.communicate(input=f_name)[0]

# Replace characters we can't have in our name
signature = signature.split("(")[0]
signature = signature.replace(" ", "_")

try:
f.setName(signature, SourceType.ANALYSIS)
except:
pass