Skip to content

Commit f65f9b8

Browse files
author
rdmmf
committed
fix: [ghidra-function] fixed metacategory
1 parent 3914ff6 commit f65f9b8

File tree

1 file changed

+66
-66
lines changed

1 file changed

+66
-66
lines changed

objects/ghidra-function/definition.json

Lines changed: 66 additions & 66 deletions
Original file line numberDiff line numberDiff line change
@@ -1,61 +1,43 @@
11
{
22
"attributes": {
3-
"function-name":{
4-
"description": "function name",
5-
"misp-attribute": "text",
6-
"ui-priority": 1,
7-
"disable_correlation": true
3+
"bsim-signature": {
4+
"description": "BSIM signature of the vector",
5+
"misp-attribute": "hex",
6+
"ui-priority": 0
87
},
9-
"label": {
10-
"description": "ghidra symbol label(s) associated with the function",
8+
"bsim-vector": {
9+
"description": "comma separated BSIM Feature Vector",
1110
"misp-attribute": "text",
12-
"ui-priority": 0,
13-
"disable_correlation": true,
14-
"multiple": true
11+
"ui-priority": 0
1512
},
16-
"function-scope": {
17-
"description": "ghidra function scope (export, import, internal)",
18-
"misp-attribute": "text",
19-
"ui-priority": 0,
13+
"calling-convention": {
14+
"description": "The calling convention used by the function (e.g., cdecl, stdcall)",
2015
"disable_correlation": true,
21-
"sane_default": [
22-
"export",
23-
"import",
24-
"internal"
25-
]
16+
"misp-attribute": "text",
17+
"ui-priority": 0
2618
},
27-
"is-thunk": {
28-
"description": "identifies a thunk function",
29-
"misp-attribute": "boolean",
30-
"ui-priority": 0,
31-
"disable_correlation": true
19+
"decompiled-function": {
20+
"description": "Ghidra decompiled function",
21+
"disable_correlation": true,
22+
"misp-attribute": "text",
23+
"ui-priority": 0
3224
},
33-
"external-library": {
34-
"description": "external library name if the function is an import",
25+
"decompiler-id": {
26+
"description": "ghidra's decompiler version used to generate the FID and BSIM hashes.",
27+
"disable_correlation": true,
3528
"misp-attribute": "text",
36-
"ui-priority": 0,
37-
"disable_correlation": true
29+
"ui-priority": 0
3830
},
3931
"entrypoint-address": {
4032
"description": "function entrypoint address (integer in a text for consistency with the entrypoint-address in ELF/PE/Mach-O Objects)",
41-
"misp-attribute": "text",
42-
"ui-priority": 0,
43-
"disable_correlation": true
44-
},
45-
"instruction-count": {
46-
"description": "Instruction count",
47-
"misp-attribute": "integer",
48-
"ui-priority": 0,
49-
"disable_correlation": true
50-
},
51-
"bsim-vector": {
52-
"description": "comma separated BSIM Feature Vector",
33+
"disable_correlation": true,
5334
"misp-attribute": "text",
5435
"ui-priority": 0
5536
},
56-
"bsim-signature": {
57-
"description": "BSIM signature of the vector",
58-
"misp-attribute": "hex",
37+
"external-library": {
38+
"description": "external library name if the function is an import",
39+
"disable_correlation": true,
40+
"misp-attribute": "text",
5941
"ui-priority": 0
6042
},
6143
"fid-fh-hash": {
@@ -73,45 +55,63 @@
7355
"misp-attribute": "hex",
7456
"ui-priority": 0
7557
},
76-
"decompiled-function": {
77-
"description": "Ghidra decompiled function",
58+
"function-name": {
59+
"description": "function name",
60+
"disable_correlation": true,
61+
"misp-attribute": "text",
62+
"ui-priority": 1
63+
},
64+
"function-scope": {
65+
"description": "ghidra function scope (export, import, internal)",
66+
"disable_correlation": true,
7867
"misp-attribute": "text",
79-
"ui-priority": 0,
80-
"disable_correlation": true
68+
"sane_default": [
69+
"export",
70+
"import",
71+
"internal"
72+
],
73+
"ui-priority": 0
8174
},
8275
"function-signature": {
8376
"description": "Function signature",
77+
"disable_correlation": true,
8478
"misp-attribute": "text",
85-
"ui-priority": 0,
86-
"disable_correlation": true
79+
"ui-priority": 0
8780
},
88-
"return-type": {
89-
"description": "The data type returned by the function",
90-
"misp-attribute": "text",
91-
"ui-priority": 0,
92-
"disable_correlation": true
81+
"instruction-count": {
82+
"description": "Instruction count",
83+
"disable_correlation": true,
84+
"misp-attribute": "integer",
85+
"ui-priority": 0
9386
},
94-
"calling-convention": {
95-
"description": "The calling convention used by the function (e.g., cdecl, stdcall)",
87+
"is-thunk": {
88+
"description": "identifies a thunk function",
89+
"disable_correlation": true,
90+
"misp-attribute": "boolean",
91+
"ui-priority": 0
92+
},
93+
"label": {
94+
"description": "ghidra symbol label(s) associated with the function",
95+
"disable_correlation": true,
9696
"misp-attribute": "text",
97-
"ui-priority": 0,
98-
"disable_correlation": true
97+
"multiple": true,
98+
"ui-priority": 0
9999
},
100-
"language-id": {
100+
"language-id": {
101101
"description": "Language id of the program (architecture, compiler, etc.)",
102+
"disable_correlation": true,
102103
"misp-attribute": "text",
103-
"ui-priority": 0,
104-
"disable_correlation": true
104+
"ui-priority": 0
105105
},
106-
"decompiler-id": {
107-
"description": "ghidra's decompiler version used to generate the FID and BSIM hashes.",
106+
"return-type": {
107+
"description": "The data type returned by the function",
108+
"disable_correlation": true,
108109
"misp-attribute": "text",
109-
"ui-priority": 0,
110-
"disable_correlation": true
110+
"ui-priority": 0
111111
}
112112
},
113113
"description": "ghidra function",
114-
"meta-category": "ghidra",
114+
"meta-category": "misc",
115115
"name": "ghidra-function",
116116
"required": [
117117
"function-name",

0 commit comments

Comments
 (0)