OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

sarif message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Re: [sarif] Question about locations


Larry:


On 12/13/2018 12:30 PM, Larry Golding (Myriad Consulting Inc) wrote:
To specify an offset in a binary, you can use location.physicalLocation.region.byteOffset. Does that meet your need?
Maybe, but I've been thinking of that as different. An effective address of X doesn't show up in a DLL at byte offset X.
If not, IMO we would add an "address" property to the physicalLocation object -- this is a physical, not a logical attribute.
That would work. It would also allow you to move the address property out of the stack object down into the associated physicalLocation.

-Paul

Larry

-----Original Message-----
From: sarif@lists.oasis-open.org <sarif@lists.oasis-open.org> On Behalf Of Paul Anderson
Sent: Thursday, December 13, 2018 9:23 AM
To: sarif@lists.oasis-open.org
Subject: [sarif] Question about locations

All:

Would it be an appropriate use of fullyQualifiedLogicalName to encode an effective address within a binary? I would use it with a kind of "address".

I see that there is a slot in the stack object for an address, but that's the only place an address can show up. In my use case (static and dynamic analysis of binaries where the source is not available), I need to express locations in terms of their effective address.

-Paul

--
Paul Anderson, VP of Engineering, GrammaTech, Inc.
531 Esty St., Ithaca, NY 14850
Tel: +1 607 273-7340 x118; https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.grammatech.com&amp;data=02%7C01%7Cv-lgold%40microsoft.com%7Cc3acb6e45f034d11158c08d6611fa8d0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636803185959990768&amp;sdata=HFTAWa7Gk%2BsxOTJVFKnOT%2FoQY71FD4UhkXyFrIxlxHg%3D&amp;reserved=0


---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  Follow this link to all your TCs in OASIS at:
https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.oasis-open.org%2Fapps%2Forg%2Fworkgroup%2Fportal%2Fmy_workgroups.php&amp;data=02%7C01%7Cv-lgold%40microsoft.com%7Cc3acb6e45f034d11158c08d6611fa8d0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636803185960000777&amp;sdata=hvQ2VhE1a8G%2FlDL9o4vD1MzQZVn60GJO%2BPUdtjPJGVk%3D&amp;reserved=0


--
Paul Anderson, VP of Engineering, GrammaTech, Inc.
531 Esty St., Ithaca, NY 14850
Tel: +1 607 273-7340 x118; http://www.grammatech.com



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]