Another 1.9.1 compat change, this time for msfmachscan
git-svn-id: file:///home/svn/framework3/trunk@6616 4d416f70-5f16-0410-b530-b9f4589650daunstable
parent
90af8f03db
commit
51f0e8fc53
|
@ -107,10 +107,10 @@ class JmpRegScanner < Generic
|
||||||
|
|
||||||
parse_ret = false
|
parse_ret = false
|
||||||
|
|
||||||
byte1 = mach.read(offset, 1)[0]
|
byte1 = mach.read(offset, 1).unpack("C*")[0]
|
||||||
|
|
||||||
if byte1 == 0xff
|
if byte1 == 0xff
|
||||||
byte2 = mach.read(offset+1, 1)[0]
|
byte2 = mach.read(offset+1, 1).unpack("C*")[0]
|
||||||
regname = Rex::Arch::X86.reg_name32(byte2 & 0x7)
|
regname = Rex::Arch::X86.reg_name32(byte2 & 0x7)
|
||||||
|
|
||||||
case byte2 & 0xf8
|
case byte2 & 0xf8
|
||||||
|
@ -161,8 +161,8 @@ class PopPopRetScanner < JmpRegScanner
|
||||||
message = ''
|
message = ''
|
||||||
|
|
||||||
pops = mach.read(offset, 2)
|
pops = mach.read(offset, 2)
|
||||||
reg1 = Rex::Arch::X86.reg_name32(pops[0] & 0x7)
|
reg1 = Rex::Arch::X86.reg_name32(pops[0,1].unpack("C*")[0] & 0x7)
|
||||||
reg2 = Rex::Arch::X86.reg_name32(pops[1] & 0x7)
|
reg2 = Rex::Arch::X86.reg_name32(pops[1,1].unpack("C*")[0] & 0x7)
|
||||||
|
|
||||||
message = "pop #{reg1}; pop #{reg2}; "
|
message = "pop #{reg1}; pop #{reg2}; "
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue