Legend

[axt]

Legend

[axt]

Can you give more details what you exactly mean by legend?

What I'm currently planning is to have the ability to specify extra meta-data for the nodes and edges.

Here is an example of what I think of. In this sample the nodes contain the extra metadata HA and HF, while the edges display how many times that edge was executed. Of course these would be arbitrary, and supplied by the caller.

[kevinkoo001]

Oh, I should have told you more clearly. I meant the legend of the arrows. (i.e., colors)
As defined in your source, black means 'call', grey means 'ret' and so forth.
Some might take those colors for granted, but some might not like me. :)

[axt]

I really don't know how to plot that onto a '.dot' graph, but will create a wiki page for them.

[axt]

Since I can't put that on the output file, I write down the latest colorings here:

color	description
black	'call' edge
gray	'ret' edge
gray, dashed	'fakeret' edge
blue	unconditional jump
blue, dashed	'next' edges created by cfg normalization
green	conditional edge, condition is true branch
red	conditional jump, condition is false branch
yellow	unknown edge (exception while evaluating, or not handled case)

Note:
Before 1ac8d7a :

The util generates the conditional red, green edges based on the VEX IR exit targets, and not by the original asm, this can be misleading when interpreting the colors.

For example, the conditional edges are reversed in VEX for this sample code:

0x0:    cmp si, 0x7f
0x4:    jg  0x1d

IRSB {
[...]
   11 | if (t5) { PUT(eip) = 0x6; Ijk_Boring }
   NEXT: PUT(eip) = 0x0000001d; Ijk_Boring
}

After 1ac8d7a :
Both colorings possible:

• if printvex == True then its based on VEX exit targets
• if printvex == False and printasm == True then its based on asm exit targets (works currently only for x86 codes)
• you can create a custom visualization pipeline and use your own coloring

I will add these to the documentation some time in the future.

Also coloring will be configurable in the near future.