From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by sourceware.org (Postfix) with ESMTPS id 1ABFF385B804 for ; Mon, 9 May 2022 09:48:54 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 1ABFF385B804 Received: from mail-wr1-f70.google.com (mail-wr1-f70.google.com [209.85.221.70]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-597-Wq4wqL58NImLEPDLypjARQ-1; Mon, 09 May 2022 05:48:45 -0400 X-MC-Unique: Wq4wqL58NImLEPDLypjARQ-1 Received: by mail-wr1-f70.google.com with SMTP id w4-20020adfbac4000000b0020acba4b779so5605126wrg.22 for ; Mon, 09 May 2022 02:48:44 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:in-reply-to:references:date :message-id:mime-version; bh=WVywWnnaOVwXivLxALJRHGpHIg/gFY1QIGJDoP87D6s=; b=nNTJsXMDCr60YXfeeNhKudAhrRZTuSwqmhcwJ8G+DXzpC+cGlaoJkxSBlSmnwrVCgN 6OfYWK7Ds6G+qhebuAy+eHzNKOlmk1ZVTMANsduziOeEY31QpzIncqRhSxwIAPvMc48w FLvyorBYmmeyLaA9LzbPSzoGsm0yhlXpKLl0DfzkRMEDMtAXOIC4Qo4n0y/xMOv4ATKn dubX8oszMiFzavQ2Pi3BI+LLEgqndHmznkqjhZd+ujcbiTtQB/cxwS/J1fCuk6fo3/Gv r7esdR1NjT85FXHG8L0DGncj4aHPwBBQtJRFUKeZ1/1a3ZTEoq/Lno8nO9R0DOHkyG6P w9CQ== X-Gm-Message-State: AOAM531mVx9hhc1aBn4c7Zwi9QIJAlXgIXQP9tVDcA9XuFqQwwVV9URx cECEge4p3WkpK2QOXud49bm1VOGjSt0yZsQqq/WmxmFI3K5Vl4d48nYS2ZJrgxdtZMZhf2caHDk 1GermC5njzknwVg452g== X-Received: by 2002:a5d:47a2:0:b0:20c:5f8c:a645 with SMTP id 2-20020a5d47a2000000b0020c5f8ca645mr12821062wrb.526.1652089723510; Mon, 09 May 2022 02:48:43 -0700 (PDT) X-Google-Smtp-Source: ABdhPJypRva9eeiANT/6f9tmELi/iHUWlsTeB4SXLdR8tNCmm0Fw/geKXE1/5AQ1sH8FOKMSyZPAqA== X-Received: by 2002:a5d:47a2:0:b0:20c:5f8c:a645 with SMTP id 2-20020a5d47a2000000b0020c5f8ca645mr12821041wrb.526.1652089723199; Mon, 09 May 2022 02:48:43 -0700 (PDT) Received: from localhost (host81-136-113-48.range81-136.btcentralplus.com. [81.136.113.48]) by smtp.gmail.com with ESMTPSA id p3-20020a05600c064300b003942a244f31sm16346427wmm.10.2022.05.09.02.48.42 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 09 May 2022 02:48:42 -0700 (PDT) From: Andrew Burgess To: Jan Beulich Cc: binutils@sourceware.org Subject: Re: [PATCH 2/2] libopcodes: extend the styling within the i386 disassembler In-Reply-To: <559aaea5-bf16-f48e-fc0e-e750a2795b99@suse.com> References: <388c1dd1235a3c95aefc7caee5726b869b6894e0.1651239378.git.aburgess@redhat.com> <87zgjyn4k1.fsf@redhat.com> <559aaea5-bf16-f48e-fc0e-e750a2795b99@suse.com> Date: Mon, 09 May 2022 10:48:41 +0100 Message-ID: <87tu9zkpdy.fsf@redhat.com> MIME-Version: 1.0 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain X-Spam-Status: No, score=-6.3 required=5.0 tests=BAYES_00, DKIMWL_WL_HIGH, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, RCVD_IN_DNSWL_LOW, SPF_HELO_NONE, SPF_NONE, TXREP, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: binutils@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Binutils mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 May 2022 09:48:56 -0000 Jan Beulich via Binutils writes: > On 03.05.2022 15:12, Andrew Burgess wrote: >> Jan Beulich via Binutils writes: >> >>> On 29.04.2022 15:42, Andrew Burgess via Binutils wrote: >>>> The i386 disassembler is pretty complex. Most disassembly is done >>>> indirectly; operands are built into buffers within a struct instr_info >>>> instance, before finally being printed later in the disassembly >>>> process. >>>> >>>> Sometimes the operand buffers are built in a different order to the >>>> order in which they will eventually be printed. >>>> >>>> Each operand can contain multiple components, e.g. multiple registers, >>>> immediates, other textual elements (commas, brackets, etc). >>>> >>>> When looking for how to apply styling I guess the ideal solution would >>>> be to move away from the operands being a single string that is built >>>> up, and instead have each operand be a list of "parts", where each >>>> part is some text and a style. Then, when we eventually print the >>>> operand we would loop over the parts and print each part with the >>>> correct style. >>>> >>>> But it feels like a huge amount of work to move from where we are >>>> now to that potentially ideal solution. Plus, the above solution >>>> would be pretty complex. >>>> >>>> So, instead I propose a .... different solution here, one that works >>>> with the existing infrastructure. >>>> >>>> As each operand is built up, piece be piece, we pass through style >>>> information. This style information is then encoded into the operand >>>> buffer (see below for details). After this the code can continue to >>>> operate as it does right now in order to manage the set of operand >>>> buffers. >>>> >>>> Then, as each operand is printed we can split the operand buffer into >>>> chunks at the style marker boundaries, with each chunk being printed >>>> in the correct style. >>>> >>>> For encoding the style information I use the format "~%x~". As far as >>>> I can tell the '~' is not otherwise used in the i386 disassembler, so >>>> this should serve as a unique marker. To speed up writing and then >>>> reading the style markers, I take advantage of the fact that there are >>>> less than 16 styles so I know the '%x' will only ever be a single hex >>>> character. >>> >>> Like H.J. I'd like to ask that you avoid ~ here (I actually have plans >>> to use it to make at least some 64-bit constants better recognizable); >>> I'm not sure about using non-ASCII though, as that may cause issues with >>> compilers treating non-ASCII wrong. I'd soften this to non-alnum, non- >>> operator characters (perhaps more generally non-printable). Otoh I guess >>> about _any_ character could be used in symbol names, so I'm not >>> convinced such an escaping model can be generally conflict free. >> >> Hi Jan, >> >> I've addressed all the simple feedback from H.J. and Vladimir, and I >> just need to figure out something for the escaping mechanism. >> >> I'm still keen to try and go with an escaping based solution, my >> reasoning is that I think that this is the solution least likely to >> introduce latent disassembler bugs. >> >> However, that position is based on my belief that there's no exhaustive >> test for the i386 based disassembler, i.e. one that tests every single >> valid instruction disassembles correctly. If there was such a test then >> I might be more tempted to try something more radical... >> >> That said, if I was going to stick with an escaping scheme, then I have >> some ideas for moving forward. >> >> The current scheme relies on the fact that symbols are not printed >> directly from the i386 disassembler, instead the i386 disassembler calls >> back into the driver application (objdump, gdb) to print the symbol. As >> a result, symbols don't go through the instr_info::obuf buffer. This >> means that we never try to interpret a symbol name for escape >> characters. > > Hmm, indeed. I have to admit that I view it as a significant shortcoming > of the disassembler that it doesn't resolve addresses in the output. So > I'd like to at least not see the road being closed towards improving this. > >> This means we avoid one of the issues that you raised, what if the >> escape character appears in a symbol name; the answer is, I just don't >> need to worry about this! >> >> So, I only need to ensure that the escape character is: >> >> (a) not a character that the disassembler currently tries to directly >> print itself, and >> >> (b) not something that will ever be printed as part of an immediate. > > Or, more generally, as part of any kind of operand. Sure, but the reason I single out immedates here is I think these are the only operand whose content is not statically know within the disassembler. For example, register operands, every possible register operand value is enumerated within the i386-dis.c source file, right? So when I proposed using '~' I could simply search the source file, find no uses, and know that character is not (currently) used within a register name. Immediates are different though, for them we rely on libc to generate the textual representation. The only other operand type that might contain "unknown" characters would be a field that contains an address and potentially a symbol name, but as was already discussed, these are not printed through the disassembler. My question then, other than the exceptions I've already listed, are there other types of operand where the content doesn't already exit within i386-dis.c? > >> Clearly my choice passes both right now, but looks like it will not pass >> (b) forever. >> >> One possible solution would be to replace all the remaining places where >> we directly write to instr_info::obuf with calls to oappend_char. > > I guess this might be troublesome. The way the disassembler works is a > little quirky here and there, and hence one needs to play tricks every > now and then to half-way reasonably deal with certain special cases. > >> I >> could then extend the oappend API such that we do "real" escaping, that >> is (assuming the continued use of '~' for now): '~X' would indicate a >> style marker, with X being the style number, and '~~' would indicate a >> literal '~' character. In this was we really wouldn't care which >> character we used (though we'd probably pick one that didn't crop up too >> ofter just for ease of parsing the buffers). >> >> An alternative solution would be to pick a non-printable character, >> e.g. \001, and use this as the escape character in place of the current >> '~'. This seems to pass the (a) and (b) tests above, and if such a >> character does ever appear in a symbol name, then, as I've said above, I >> don't believe this would cause us any problems. > > I suppose \001 (or a character very close to this, as iirc \001 has > some meaning internally in gas, and I'm not entirely certain none of > these uses can ever "escape" gas) is good to start with. Provided it > is properly abstracted so it can, if necessary, be _very_ easily > changed (by modifying exactly one line, or - if you need both a > single-quoted and a double-quoted instance - two adjacent ones). > > Albeit, thinking of this last aspect, maybe it would be better to > only have a double-quoted instance in the first place, and allow > for the escape to be more than a single character if need be ... > > And yes - if a symbol name was possible to hit and if that symbol > name contained such an escape sequence, aiui the worst that would > happen is bogus coloring? IOW the escape would not be looked for and > replaced / processed when coloring is disabled? Unfortunately this is not correct. The disassembler always sends styling information to the user (objdump, gdb, etc), its the user that decides if the output should be styled or not. What this means is that if the disassembler encountered a random symbol (which would be a pretty big change to the disassembler), and the symbol did include something like ~a~ (using the current character to make it more readable here), then the whole '~a~' part would disappear from the symbol name, this would be seen as a style marker, the next up to the start of '~a~' sould take the previous style, and the text after '~a~' would take the '0xa' style, but the '~a~' itself would always be stripped out. One relatively easy solution here would be to say that, when we add the ability to include symbol names in the disassembler output buffers, at that point we can add "true" escaping. So if your symbol name is 'foo~a~bar' then as this is added to the disassebmler buffer we would actually add 'foo~~a~~bar', and we'd extend the code that parses out styling information so that it could handle this case. This feels like it should be easy enough to do. All we then have to do is convince ourselves that there's no way for the escape character to make it into the disassembler output from any other source, and we should be fine. For example, your concern about \001 escaping from gas. Other than within a symbol name, how might the disassembler end up trying to print this byte? Thanks, Andrew