Revamp Python regression tests suite (#2022)
* Fix Python regression test suite (partial) * Fix Python regression test suite * Add a test for mapping at high addresses * Add ctl tests
This commit is contained in:
@@ -1,6 +1,5 @@
|
||||
#!/usr/bin/python
|
||||
|
||||
from __future__ import print_function
|
||||
import binascii
|
||||
import regress
|
||||
|
||||
@@ -8,21 +7,18 @@ from unicorn import *
|
||||
from unicorn.x86_const import *
|
||||
|
||||
|
||||
CODE = binascii.unhexlify(b"".join([
|
||||
b"8B 74 01 28", # mov esi, dword ptr [ecx + eax + 0x28] mapped: 0x1000
|
||||
b"03 F0", # add esi, eax 0x1004
|
||||
b"8D 45 FC", # lea eax, dword ptr [ebp - 4] 0x1006
|
||||
b"50", # push eax 0x1009
|
||||
b"6A 40", # push 0x40 0x100A
|
||||
b"6A 10", # push 0x10 0x100C
|
||||
b"56", # push esi 0x100E
|
||||
b"FF 15 20 20 00 10" # call some address 0x100F
|
||||
]).replace(" ", ""))
|
||||
CODE = binascii.unhexlify((
|
||||
"8B 74 01 28" # mov esi, dword ptr [ecx + eax + 0x28] mapped: 0x1000
|
||||
"03 F0" # add esi, eax 0x1004
|
||||
"8D 45 FC" # lea eax, dword ptr [ebp - 4] 0x1006
|
||||
"50" # push eax 0x1009
|
||||
"6A 40" # push 0x40 0x100A
|
||||
"6A 10" # push 0x10 0x100C
|
||||
"56" # push esi 0x100E
|
||||
).replace(' ', ''))
|
||||
|
||||
|
||||
def showpc(mu):
|
||||
pc = mu.reg_read(UC_X86_REG_EIP)
|
||||
print("pc: 0x%x" % (pc))
|
||||
BASE = 0x1000
|
||||
STACK = 0x4000
|
||||
|
||||
|
||||
class HookCodeStopEmuTest(regress.RegressTest):
|
||||
@@ -30,38 +26,32 @@ class HookCodeStopEmuTest(regress.RegressTest):
|
||||
mu = Uc(UC_ARCH_X86, UC_MODE_32)
|
||||
|
||||
# base of CODE
|
||||
mu.mem_map(0x1000, 0x1000)
|
||||
mu.mem_write(0x1000, CODE)
|
||||
mu.reg_write(UC_X86_REG_EIP, 0x1000)
|
||||
mu.mem_map(BASE, 0x1000)
|
||||
mu.mem_write(BASE, CODE)
|
||||
|
||||
# base of STACK
|
||||
mu.mem_map(0x4000, 0x4000)
|
||||
mu.mem_write(0x4000, "\x00" * 0x4000)
|
||||
mu.reg_write(UC_X86_REG_ESP, 0x6000)
|
||||
mu.reg_write(UC_X86_REG_EBP, 0x6000)
|
||||
mu.mem_map(STACK, 0x1000)
|
||||
mu.mem_write(STACK, b"\x00" * 0x1000)
|
||||
|
||||
mu.reg_write(UC_X86_REG_EIP, BASE)
|
||||
mu.reg_write(UC_X86_REG_ESP, STACK + 0x1000 - 8)
|
||||
mu.reg_write(UC_X86_REG_EBP, STACK + 0x1000 - 8)
|
||||
mu.reg_write(UC_X86_REG_ECX, 0x0)
|
||||
mu.reg_write(UC_X86_REG_EAX, 0x0)
|
||||
|
||||
def _hook(_, access, address, length, value, context):
|
||||
pc = mu.reg_read(UC_X86_REG_EIP)
|
||||
print("mem unmapped: pc: %x access: %x address: %x length: %x value: %x" % (
|
||||
pc, access, address, length, value))
|
||||
mu.emu_stop()
|
||||
return True
|
||||
|
||||
mu.hook_add(UC_HOOK_MEM_UNMAPPED, _hook)
|
||||
|
||||
# we only expect the following instruction to execute,
|
||||
# and it will fail, because it accesses unmapped memory.
|
||||
# mov esi, dword ptr [ecx + eax + 0x28] mapped: 0x1000
|
||||
mu.emu_start(0x1000, 0x100F)
|
||||
showpc(mu)
|
||||
|
||||
with self.assertRaises(UcError) as ex:
|
||||
mu.emu_start(BASE, BASE + len(CODE), count=1)
|
||||
|
||||
self.assertEqual(UC_ERR_READ_UNMAPPED, ex.exception.errno)
|
||||
|
||||
regress.logger.debug("pc: %#x", mu.reg_read(UC_X86_REG_EIP))
|
||||
|
||||
# now, we want to reuse the emulator, and keep executing
|
||||
# from the next instruction
|
||||
mu.reg_write(UC_X86_REG_EIP, 0x1004)
|
||||
self.assertEqual(0x1004, mu.reg_read(UC_X86_REG_EIP))
|
||||
|
||||
# we expect the following instructions to execute
|
||||
# add esi, eax 0x1004
|
||||
@@ -70,10 +60,9 @@ class HookCodeStopEmuTest(regress.RegressTest):
|
||||
# push 0x40 0x100A
|
||||
# push 0x10 0x100C
|
||||
# push esi 0x100E
|
||||
#
|
||||
# currently, a UC_ERR_READ_UNMAPPED exception is raised here
|
||||
mu.emu_start(0x1004, 0x100F)
|
||||
showpc(mu)
|
||||
mu.emu_start(BASE + 0x4, BASE + len(CODE))
|
||||
|
||||
regress.logger.debug("pc: %#x", mu.reg_read(UC_X86_REG_EIP))
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
|
||||
Reference in New Issue
Block a user