6 ms·
Show HN: Online C/C++ to assembly visualizer [Weekend Project]
- option_greek 14y agoNice project. Will be more useful if there is an explanation of code generated. For example, making the various assembly instructions clickable and displaying information about them. Also a tiny bit of explanation about code and data sections might be of help too :)
- ynh 14y agoOk added to the todo list
- wutwot 14y agoYou don't filter out CPP macro's. I would skip that and only allow C code. Or run this thing in a proper jail because at the moment: - doing an include #include "/dev/random" will block the thread. - including "/etc/passwd" is also possible although I don't see a direct way to turn this into password disclosure. Seriously; even if it's a weekend project, letting people run all kinds of potentially bad code on your machine is never a good idea. Even though you don't run the binaries yourself there's so many ways to mess around with a compiler. You just don't know what's going to happen.
- __alexs 14y agochroot would probably be sufficient. Barring some sort of code execution vuln in the compiler you can only load stuff off of the filesystem. Having the actual CPP available is nice because some bits of libc are only macros.
- ynh 14y agoI have now added some basic macro detection
- yonilevy 14y ago#define x "/etc/passwd" #include x
- ynh 14y agoI have now fixed it. But I think there must be an other way to make it safe. Maybe a sandbox
- espes 14y agoIf it's a server used for other things, definitely a sandbox. gcc's not exactly security hardend. Best one (novel solution, though the code's old and shit) I've come across: https://pts-mini-gpl.googlecode.com/svn/trunk/uevalrun/doc/uevalrun.html https://pts-mini-gpl.googlecode.com/svn/trunk/uevalrun/doc/u...
- dzorz 14y agoThis is part of your /etc/shadow file: root:censored We can still read /etc/ssh/ssh_host_rsa_key, etc. Edit: removed hash, sorry
- daeken 14y agoSaying "you can read /etc/shadow by doing X, Y, and Z" is okay -- it's a permanent record there was a flaw. Saying "here's your root password hash" is not ok; even once the flaw is fixed, that hash is still floating around out there. I'd take advantage of the edit period and remove that from your comment; it's just not cool. The OP should definitely change the root password on the box regardless.
- ynh 14y agoNo problem I think I could fix it. Can you show us how you read the content of the file. Just want to learn more
- wulczer 14y agoWell one easy way to increase security would for this to stop running as root. Please, don't ever run your application code as root. Less so when it's facing the Internet.
- Ubiquite 14y agoI could have made the same comment. Good project, could be useful to me. A peace of asm documentation would be tasty.
- alpb 14y agoTry this on iPad. Generated assembly looks very bad in terms of layout.
- berkut 14y agoSide by side would be a better layout like: http://gcc.godbolt.org/ http://gcc.godbolt.org/
- vvnraman 14y agoThis really removes any hurdle I might have of inspecting the assembly code due to sheer laziness of opening up my Visual Studio and start debugging. Awesome work. If you add some type of interactivity to the generated assembly, it can be made more visual.
- mappu 14y agoCan i recommend adding -masm=intel to your gcc flags? I know AT&T syntax is the default for gcc and gas, but not why. Intel syntax seems clearer to read and is used by most assembly tutorials.
- ynh 14y agoOK I will let the user choose between both syntax
- winter_blue 14y agoThis could be a great educational tool! It could be used to teach Introductory Computer Organization at the college level. I have a suggestion: - Would you be able to separate the web interface, so that it could used to display Java -> JVM assembly, or any other language. Basically, so that it would be re-usable. - Putting this up on GitHub would be great. Finally, great work for just a weekend!
- ynh 14y agoThe code is available on github https://github.com/ynh/cpp-to-assembly https://github.com/ynh/cpp-to-assembly
- tisme 14y agoVery neat! Suggestion: add a 'flags' field where you can specify stuff like -std=c99 and any other flags you might need for your code to compile, and a horizontal rule or something like that after every line of input code. If you do the 'flags' thing make sure you filter it to avoid escapes to the underlying shell.
- unix-dude 14y agoDefinitely interesting! Lots of us unix people would just run objdump -d for a quick ASM extraction, but this is probably much friendlier to the user just starting to learn C/ASM. Overall, Good Job!
- ajhai 14y agoInteresting project. As an improvement to the UI, you can consider adding syntax highlighting to the editor. Take a look at ACE editor (http://ace.ajax.org/ http://ace.ajax.org/).
- daurnimator 14y agoError: Command failed: /bin/sh: 1: c-preload/compiler-wrapper: Permission denied
- gtklocker 14y agoError: Command failed: /tmp/test969394043.c:1:0: fatal error: can’t open /root/assembler/ccMEBJ3B.s for writing: Permission denied compilation terminated. The bug is not reproducible, so it is likely a hardware or OS problem. Really.
- ynh 14y agoJust fixed
- jrajav 14y agoSilently fails if you make a syntax error. I accidentally pasted this without newlines and at first I thought it wasn't responding: #include <stdio.h>int main() { printf("Hello World"); }
- b3b0p 14y agoI love it! My only suggestion right now is to have it so you can have the assembly on the left or right side. Maybe it's just me, but my focus seems to be on the left side more than the right. Since this is a focused on assembly it seems, wouldn't you want the focus on the assembly, not the C? It could be different for different people though.
- munin 14y agoLLVM has a similar page: http://llvm.org/demo http://llvm.org/demo you can compile C/C++ to LLVM IR and also 32 or 64 bit intel assembler. you can also see the effects of different optimizations, etc
- oo 14y agoJust tried this code: #include __FILE__ :-D
- akavi 14y agoDoes anyone have a link to a good beginner's guide explaining the output?
- Aardwolf 14y agoIn the hello world example, no matter what text you put there, the assembly is the same. Where does the string content go?
- berkut 14y agoStatic data in the binary.
- bostko 14y agoCan't you add a function for memorizing the code written? Thank you!
- ynh 14y agoYes I could add some thing like a permanent link creator.
- pgbovine 14y agoexcellent -- my unsolicited advice is for you to ping some professors and TAs who teach low-level programming to get them interested in using this in their teaching.
- jheriko 14y agodon't work really - some guidance on use might be acceptable. does it need to be a whole program? my snippets give confusing errors about variable identifiers not being types o_0
- ynh 14y agoIt must be a valid c/c++ program. Just wrap your code in a function
- erichocean 14y agoIt'd be nice to make, e.g. the for loop clickable, so that it "stuck" and you could scroll down and see where it ended. As it is now, as soon as you move your mouse, it unhighlights.