/* radare - LGPL - Copyright 2016-2026 - Oscar Salvador */

#include <r_bin.h>
#include <r_io.h>
#include "bflt/bflt.h"

static bool load(RBinFile *bf, RBuffer *buf, ut64 loadaddr) {
	bf->bo->bin_obj = r_bin_bflt_new_buf (buf);
	return bf->bo->bin_obj != NULL;
}

static RList *entries(RBinFile *bf) {
	RList *ret = r_list_newf (free);
	if (ret) {
		struct r_bin_bflt_obj *obj = (struct r_bin_bflt_obj *)R_UNWRAP3 (bf, bo, bin_obj);
		RBinAddr *ptr = r_bflt_get_entry (obj);
		if (ptr) {
			r_list_append (ret, ptr);
		}
	}
	return ret;
}

static void __patch_reloc(RIOBind *iob, ut32 addr_to_patch, ut32 data_offset) {
	ut8 val[4] = { 0 };
	r_write_le32 (val, data_offset);
	iob->overlay_write_at (iob->io, addr_to_patch, val, sizeof (val));
}

static int search_old_relocation(struct reloc_struct_t *reloc_table, ut32 addr_to_patch, int n_reloc) {
	int i;
	for (i = 0; i < n_reloc; i++) {
		if (addr_to_patch == reloc_table[i].data_offset) {
			return i;
		}
	}
	return -1;
}

static bool read_be32_at(RBuffer *b, ut64 offset, ut32 *out) {
	ut8 buf[sizeof (ut32)];
	if (r_buf_read_at (b, offset, buf, sizeof (buf)) != sizeof (buf)) {
		return false;
	}
	*out = r_read_be32 (buf);
	return true;
}

static RVecRBinReloc *patch_relocs(RBinFile *bf) {
	R_RETURN_VAL_IF_FAIL (bf && bf->rbin && bf->rbin->iob.io, NULL);
	RBin *b = bf->rbin;
	RBinObject *obj = r_bin_cur_object (b);
	if (!obj) {
		return NULL;
	}
	struct r_bin_bflt_obj *bin = obj->bin_obj;
	RVecRBinReloc *list = RVecRBinReloc_new ();
	if (!list) {
		return NULL;
	}
	if (bin->got_table) {
		struct reloc_struct_t *got_table = bin->got_table;
		int i;
		for (i = 0; i < bin->n_got; i++) {
			__patch_reloc (&b->iob, got_table[i].addr_to_patch, got_table[i].data_offset);
			RBinReloc *reloc = RVecRBinReloc_emplace_back (list);
			reloc->type = R_BIN_RELOC_32;
			reloc->paddr = got_table[i].addr_to_patch;
			reloc->vaddr = reloc->paddr;
		}
		R_FREE (bin->got_table);
	}

	if (bin->reloc_table) {
		struct reloc_struct_t *reloc_table = bin->reloc_table;
		int i = 0;
		for (i = 0; i < bin->hdr->reloc_count; i++) {
			int found = search_old_relocation (reloc_table,
				reloc_table[i].addr_to_patch,
				bin->hdr->reloc_count);
			if (found != -1) {
				__patch_reloc (&b->iob, reloc_table[found].addr_to_patch, reloc_table[i].data_offset);
			} else {
				__patch_reloc (&b->iob, reloc_table[i].addr_to_patch, reloc_table[i].data_offset);
			}
			RBinReloc *reloc = RVecRBinReloc_emplace_back (list);
			reloc->type = R_BIN_RELOC_32;
			reloc->paddr = reloc_table[i].addr_to_patch;
			reloc->vaddr = reloc->paddr;
		}
		R_FREE (bin->reloc_table);
	}
	if (RVecRBinReloc_empty (list)) {
		RVecRBinReloc_free (list);
		return NULL;
	}
	return list;
}

static ut32 get_ngot_entries(struct r_bin_bflt_obj *obj) {
	ut32 data_size = obj->hdr->data_end - obj->hdr->data_start;
	ut32 i = 0, n_got = 0;
	if (data_size > obj->size) {
		return 0;
	}
	for (; i < data_size; i += 4, n_got++) {
		ut32 entry, offset = obj->hdr->data_start;
		if (offset + i + sizeof (ut32) > obj->size ||
			offset + i + sizeof (ut32) < offset) {
			return 0;
		}
		if (!read_be32_at (obj->b, offset + i, &entry)) {
			return 0;
		}
		if (!VALID_GOT_ENTRY (entry)) {
			break;
		}
	}
	return n_got;
}

static RVecRBinReloc *relocs(RBinFile *bf) {
	struct r_bin_bflt_obj *obj = (struct r_bin_bflt_obj *)bf->bo->bin_obj;
	if (!obj) {
		return NULL;
	}
	RVecRBinReloc *list = RVecRBinReloc_new ();
	ut32 i, len, n_got, amount;
	if (!list) {
		return NULL;
	}
	if (obj->hdr->flags & FLAT_FLAG_GOTPIC) {
		n_got = get_ngot_entries (obj);
		if (n_got) {
			if (n_got > UT32_MAX / sizeof (struct reloc_struct_t)) {
				goto out_error;
			}
			amount = n_got * sizeof (struct reloc_struct_t);
			struct reloc_struct_t *got_table = calloc (1, amount);
			if (got_table) {
				ut32 offset = 0;
				for (i = 0; i < n_got; offset += 4, i++) {
					ut32 got_entry;
					if (obj->hdr->data_start + offset + 4 > obj->size ||
						obj->hdr->data_start + offset + 4 < offset) {
						break;
					}
					if (!read_be32_at (obj->b, obj->hdr->data_start + offset, &got_entry) ||
						!VALID_GOT_ENTRY (got_entry)) {
						break;
					}
					got_table[i].addr_to_patch = got_entry;
					got_table[i].data_offset = got_entry + BFLT_HDR_SIZE;
				}
				obj->n_got = n_got;
				obj->got_table = got_table;
			}
		}
	}

	if (obj->hdr->reloc_count > 0) {
		ut32 n_reloc = obj->hdr->reloc_count;
		if (n_reloc > UT32_MAX / sizeof (struct reloc_struct_t)) {
			goto out_error;
		}
		amount = n_reloc * sizeof (struct reloc_struct_t);
		struct reloc_struct_t *reloc_table = calloc (1, amount);
		if (!reloc_table) {
			goto out_error;
		}
		amount = n_reloc * sizeof (ut32);
		ut32 *reloc_pointer_table = calloc (1, amount);
		if (!reloc_pointer_table) {
			free (reloc_table);
			goto out_error;
		}
		if (obj->hdr->reloc_start + amount > obj->size ||
			obj->hdr->reloc_start + amount < amount) {
			free (reloc_table);
			free (reloc_pointer_table);
			goto out_error;
		}
		len = r_buf_read_at (obj->b, obj->hdr->reloc_start, (ut8 *)reloc_pointer_table, amount);
		if (len != amount) {
			free (reloc_table);
			free (reloc_pointer_table);
			goto out_error;
		}
		ut8 *reloc_bytes = (ut8 *)reloc_pointer_table;
		for (i = 0; i < n_reloc; i++) {
			ut32 reloc_offset = r_read_be32 (reloc_bytes + i * 4) + BFLT_HDR_SIZE;

			if (reloc_offset < obj->hdr->bss_end && reloc_offset < obj->size) {
				ut8 reloc_buf[4];
				ut32 reloc_data_offset;
				if (reloc_offset + sizeof (ut32) > obj->size ||
					reloc_offset + sizeof (ut32) < reloc_offset) {
					free (reloc_table);
					free (reloc_pointer_table);
					goto out_error;
				}
				len = r_buf_read_at (obj->b, reloc_offset, reloc_buf, sizeof (reloc_buf));
				if (len != sizeof (reloc_buf)) {
					R_LOG_ERROR ("problem while reading relocation entries");
					free (reloc_table);
					free (reloc_pointer_table);
					goto out_error;
				}
				reloc_data_offset = r_read_be32 (reloc_buf) + BFLT_HDR_SIZE;
				reloc_table[i].addr_to_patch = reloc_offset;
				reloc_table[i].data_offset = reloc_data_offset;

				RBinReloc *reloc = RVecRBinReloc_emplace_back (list);
				reloc->type = R_BIN_RELOC_32;
				reloc->paddr = reloc_table[i].addr_to_patch;
				reloc->vaddr = reloc->paddr;
			}
		}
		free (reloc_pointer_table);
		obj->reloc_table = reloc_table;
	}
	return list;
out_error:
	// patch_relocs lists whatever survives here, so a failed listing leaves none
	R_FREE (obj->got_table);
	obj->n_got = 0;
	RVecRBinReloc_free (list);
	return NULL;
}

static const char *bflt_cpu_to_arch(ut32 cpu_type) {
	switch (cpu_type) {
	case BFLT_CPU_68K:
		return "m68k";
	case BFLT_CPU_386:
		return "x86";
	case BFLT_CPU_ARM:
		return "arm";
	case BFLT_CPU_MIPS:
		return "mips";
	case BFLT_CPU_PPC:
		return "ppc";
	case BFLT_CPU_SH:
		return "sh";
	case BFLT_CPU_COLDFIRE:
		return "m68k"; /* ColdFire is 68k variant */
	default:
		return "arm"; /* default to ARM */
	}
}

static RBinInfo *info(RBinFile *bf) {
	RBinInfo *info = R_NEW0 (RBinInfo);
	struct r_bin_bflt_obj *obj = R_UNWRAP3 (bf, bo, bin_obj);
	info->file = bf->file? strdup (bf->file): NULL;
	info->rclass = strdup ("bflt");
	info->bclass = strdup ("bflt");
	info->type = strdup ("bFLT (Executable file)");
	info->os = strdup ("Linux");
	info->subsystem = strdup ("Linux");
	const char *arch = obj? bflt_cpu_to_arch (obj->cpu_type): "arm";
	info->arch = strdup (arch);
	info->big_endian = obj? obj->endian: R_SYS_ENDIAN_LITTLE;
	info->bits = 32;
	info->has_va = false;
	info->dbg_info = 0;
	info->machine = strdup ("unknown");
	return info;
}

static bool check(RBinFile *bf, RBuffer *buf) {
	ut8 tmp[4] = { 0 };
	const int r = r_buf_read_at (buf, 0, tmp, sizeof (tmp));
	return r == sizeof (tmp) && !memcmp (tmp, "bFLT", 4);
}

static void destroy(RBinFile *bf) {
	r_bin_bflt_free (bf->bo->bin_obj);
}

RBinPlugin r_bin_plugin_bflt = {
	.meta = {
		.name = "bflt",
		.author = "Oscar Salvador",
		.desc = "Lightweight uC-Linux flat executables",
		.license = "LGPL-3.0-only",
	},
	.load = &load,
	.destroy = &destroy,
	.check = &check,
	.entries = &entries,
	.info = &info,
	.relocs = &relocs,
	.patch_relocs = &patch_relocs,
};

#ifndef R2_PLUGIN_INCORE
R_API RLibStruct radare_plugin = {
	.type = R_LIB_TYPE_BIN,
	.data = &r_bin_plugin_bflt,
	.version = R2_VERSION
};
#endif