hasherezade-pe-sieve/pe_sieve_api.cpp

#include <windows.h>
#include <string>
#include <iostream>

#include "pe_sieve.h"

#define PESIEVE_EXPORTS
#include <pe_sieve_api.h>

#define LIB_NAME "PE-sieve"

using namespace pesieve;

size_t print_report(const pesieve::ReportEx& report, const pesieve::t_params args, const t_report_type rtype, char* json_buf, size_t json_buf_size)
{
	if (!report.scan_report || rtype == REPORT_NONE) return 0;
	
	size_t level = 1;
	std::string report_str = report_to_json(report, rtype, ProcessScanReport::REPORT_SUSPICIOUS_AND_ERRORS, args.json_lvl, level);
	const size_t report_len = report_str.length();

	if (json_buf && json_buf_size) {
		::memset(json_buf, 0, json_buf_size);
		size_t max_len = report_len <= (json_buf_size - 1) ? report_len : (json_buf_size - 1);
		::memcpy(json_buf, report_str.c_str(), max_len);
	}
	return report_len;
}

PEsieve_report PESIEVE_API_FUNC PESieve_scan_ex(IN const PEsieve_params &args, IN const PEsieve_rtype rtype, OUT char* json_buf, IN size_t json_buf_size, OUT size_t* needed_size)
{
	if (IsBadReadPtr((LPVOID)&args, sizeof(PEsieve_params)) ) {
		pesieve::t_report empty = { 0 };
		empty.errors = 1;
		return empty;
	}
	const pesieve::ReportEx* report = pesieve::scan_and_dump(args);
	if (report == nullptr) {
		pesieve::t_report nullrep = { 0 };
		nullrep.pid = args.pid;
		nullrep.errors = pesieve::ERROR_SCAN_FAILURE;
		return nullrep;
	}
	pesieve::t_report summary = report->scan_report->generateSummary();
	//check the pointers:
	if (json_buf) {
		if (!json_buf_size || IsBadWritePtr(json_buf, json_buf_size)) {
			json_buf = nullptr;
			json_buf_size = 0;
		}
	}
	if (needed_size && IsBadWritePtr(needed_size, sizeof(size_t))) {
		needed_size = nullptr;
	}

	//print the report (only if any valid output buffer was passed)
	if (json_buf || needed_size) {
		const size_t report_size = print_report(*report, args, rtype, json_buf, json_buf_size);
		if (needed_size) {
			*needed_size = report_size;
		}
	}
	delete report;
	return summary;
}

PEsieve_report PESIEVE_API_FUNC PESieve_scan(IN const PEsieve_params &args)
{
	return PESieve_scan_ex(args, REPORT_NONE, nullptr, 0, nullptr);
}

void PESIEVE_API_FUNC PESieve_help(void)
{
	std::string my_info = pesieve::info();

	std::cout << my_info;
	MessageBox(NULL, my_info.c_str(), LIB_NAME, MB_ICONINFORMATION);
}

extern const DWORD PESIEVE_API PESieve_version = MAKELONG(MAKEWORD(PESIEVE_PATCH_VERSION, PESIEVE_MICRO_VERSION), MAKEWORD(PESIEVE_MINOR_VERSION, PESIEVE_MAJOR_VERSION));