ArmPattern: BTI and the remaining pointer authentication instructions

PACIASP/PACIBSP/AUTIASP/AUTIBSP/RETAA/RETAB are supported. Still wildcards:

BTI, BTI C, BTI J, BTI JC: 0xD503241F | targets << 6. Needs a small parser since the operand isn't part of the mnemonic. BTI ? should leave the targets open.
arm64e indirect branches: BRAA/BRAB/BLRAA/BLRAB Xn, Xm and the Z forms (BRAAZ, BLRAAZ, ...). Rn at bit 5, Rm at bit 0 (Z forms: Rm = 31). These are on nearly every indirect call in arm64e code.
LDRAA/LDRAB Xt, [Xn,#imm]{!}: imm10 scaled by 8, sign bit at 22, W (writeback) bit 11.
Register forms PACIA/PACIB/AUTIA/AUTIB Xd, Xn (and PACIZA etc.), XPACI, XPACLRI.

🤖 Generated with Claude Code

Addressed in #12:

BTI, BTI C|J|JC, and BTI ? (targets open).
BRAA/BRAB/BLRAA/BLRAB Xn, Xm and the Z forms.
LDRAA/LDRAB Xt, [Xn,#imm]{!}: imm10 scaled by 8 (sign at bit 22), W bit 11 from !; #? leaves the offset open. A misaligned or out-of-range offset gives mask 0.
PACIA/PACIB/PACDA/PACDB/AUTIA/AUTIB/AUTDA/AUTDB and their Z forms, XPACI, XPACD, XPACLRI, PACGA, and the hint forms (PACIAZ, PACIA1716, ...).

🤖 Generated with Claude Code

Navigation Menu