Add support for pointers of pointers

dissect/cstruct/parser.py

@@ -59,7 +59,7 @@ def _tokencollection() -> TokenCollection:
             "ENUM",
         )
         TOK.add(r"(?<=})\s*(?P<defs>(?:[a-zA-Z0-9_]+\s*,\s*)+[a-zA-Z0-9_]+)\s*(?=;)", "DEFS")
-        TOK.add(r"(?P<name>\*?\s*[a-zA-Z0-9_]+)(?:\s*:\s*(?P<bits>\d+))?(?:\[(?P<count>[^;\n]*)\])?\s*(?=;)", "NAME")
+        TOK.add(r"(?P<name>\**?\s*[a-zA-Z0-9_]+)(?:\s*:\s*(?P<bits>\d+))?(?:\[(?P<count>[^;\n]*)\])?\s*(?=;)", "NAME")
         TOK.add(r"[a-zA-Z_][a-zA-Z0-9_]*", "IDENTIFIER")
         TOK.add(r"[{}]", "BLOCK")
         TOK.add(r"\$(?P<name>[^\s]+) = (?P<value>{[^}]+})\w*[\r\n]+", "LOOKUP")
@@ -272,7 +272,7 @@ def _parse_field_type(self, type_: MetaType, name: str) -> tuple[MetaType, str,
         name = d["name"]
         count_expression = d["count"]
 
-        if name.startswith("*"):
+        while name.startswith("*"):
             name = name[1:]
             type_ = self.cstruct._make_pointer(type_)
 

tests/test_types_pointer.py

@@ -4,6 +4,7 @@
 
 from dissect.cstruct.cstruct import cstruct
 from dissect.cstruct.exceptions import NullPointerDereference
+from dissect.cstruct.types.pointer import Pointer
 
 from .utils import verify_compiled
 
@@ -215,3 +216,22 @@ def test_pointer_sys_size():
 
     cs = cstruct(pointer="uint16")
     assert cs.pointer is cs.uint16
+
+
+def test_pointer_of_pointer(cs: cstruct, compiled: bool):
+    cdef = """
+    struct test {
+        uint32  **ptr;
+    };
+    """
+    cs.pointer = cs.uint8
+    cs.load(cdef, compiled=compiled)
+
+    assert verify_compiled(cs.test, compiled)
+
+    obj = cs.test(b"\x01\x02AAAA")
+    assert isinstance(obj.ptr, Pointer)
+    assert isinstance(obj.ptr.dereference(), Pointer)
+    assert obj.ptr == 1
+    assert obj.ptr.dereference() == 2
+    assert obj.ptr.dereference().dereference() == 0x41414141