angr.flirt

angr.flirt.FS

alias of FlirtSignature

class angr.flirt.FlirtSignature

Bases: object

This class describes a FLIRT signature without any internal data that is only available after parsing.

__init__(arch, platform, sig_name, sig_path, unique_strings=None, compiler=None, compiler_version=None, os_name=None, os_version=None)
Parameters:

  • arch (str)

  • platform (str)

  • sig_name (str)

  • sig_path (str)

  • unique_strings (set[str] | None)

  • compiler (str | None)

  • compiler_version (str | None)

  • os_name (str | None)

  • os_version (str | None)

angr.flirt.load_signature(sig_path, meta_path=None)

Load a single FLIRT signature from a specific path.

Parameters:

  • sig_path (str) – Location of the FLIRT signature.

  • meta_path (str | None)

Return type:

tuple[str, FlirtSignature] | None

Returns:

A FlirtSignature object if loading was successful, None otherwise.

angr.flirt.load_signatures(path, ignore=None)

Recursively load all FLIRT signatures under a specific path.

Parameters:

  • path (str) – Location of FLIRT signatures.

  • ignore (list[str] | None) – A list of signature directory path prefixes to ignore. If None, a default list of signatures will be loaded.

Return type:

None

Submodules

build_sig