suite: add fuzz.py tool

suite/fuzz.py

@@ -0,0 +1,109 @@
+#!/usr/bin/python
+
+# Simple benchmark for Capstone by disassembling random code. By Nguyen Anh Quynh, 2014
+# Syntax:
+# ./suite/benchmark.py          --> Benchmark all archs
+# ./suite/benchmark.py x86      --> Benchmark all X86 (all 16bit, 32bit, 64bit)
+# ./suite/benchmark.py x86-32   --> Benchmark X86-32 arch only
+# ./suite/benchmark.py arm      --> Benchmark all ARM (arm, thumb)
+# ./suite/benchmark.py aarch64  --> Benchmark ARM-64
+# ./suite/benchmark.py mips     --> Benchmark all Mips (32bit, 64bit)
+# ./suite/benchmark.py ppc      --> Benchmark PPC
+
+from capstone import *
+
+from time import time
+from random import randint
+import sys
+
+
+# file providing code to disassemble
+FILE = '/usr/bin/python'
+
+TIMES = 64
+
+all_tests = (
+        (CS_ARCH_X86, CS_MODE_16, "X86-16bit (Intel syntax)", 0),
+        (CS_ARCH_X86, CS_MODE_16, "X86-16bit (ATT syntax)", CS_OPT_SYNTAX_ATT),
+        (CS_ARCH_X86, CS_MODE_32, "X86-32 (Intel syntax)", 0),
+        (CS_ARCH_X86, CS_MODE_32, "X86-32 (ATT syntax)", CS_OPT_SYNTAX_ATT),
+        (CS_ARCH_X86, CS_MODE_64, "X86-64 (Intel syntax)", 0),
+        (CS_ARCH_X86, CS_MODE_64, "X86-64 (Intel syntax)", CS_OPT_SYNTAX_ATT),
+        (CS_ARCH_ARM, CS_MODE_ARM, "ARM", 0),
+        (CS_ARCH_ARM, CS_MODE_THUMB, "THUMB (ARM)", 0),
+        (CS_ARCH_MIPS, CS_MODE_32 + CS_MODE_BIG_ENDIAN, "MIPS-32 (Big-endian)", 0),
+        (CS_ARCH_MIPS, CS_MODE_64 + CS_MODE_LITTLE_ENDIAN, "MIPS-64-EL (Little-endian)", 0),
+        (CS_ARCH_ARM64, CS_MODE_ARM, "ARM-64 (AArch64)", 0),
+        (CS_ARCH_PPC, CS_MODE_BIG_ENDIAN, "PPC", 0),
+        (CS_ARCH_PPC, CS_MODE_BIG_ENDIAN, "PPC, print register with number only", CS_OPT_SYNTAX_NOREGNAME),
+        )
+
+
+# for debugging
+def to_hex(s):
+    return " ".join("0x" + "{0:x}".format(ord(c)).zfill(2) for c in s) # <-- Python 3 is OK
+
+def get_code(f, size):
+    code = f.read(size)
+    if len(code) != size:  # reached end-of-file?
+        # then reset file position to begin-of-file
+        f.seek(0)
+        return None
+
+    return code
+
+
+def cs(md, code):
+    insns = md.disasm(code, 0)
+    for i in insns:
+        if i.address == 0x100000:
+            print i
+
+
+def cs_lite(md, code):
+    insns = md.disasm_lite(code, 0)
+    for (addr, size, mnem, ops) in insns:
+        if addr == 0x100000:
+            print i
+
+
+cfile = open(FILE)
+
+for (arch, mode, comment, syntax) in all_tests:
+    try:
+        request = sys.argv[1]
+        if not request in comment.lower():
+            continue
+    except:
+        pass
+
+    print("Fuzzing platform: %s" %comment)
+
+    try:
+        md = Cs(arch, mode)
+        md.detail = True
+
+        if syntax != 0:
+            md.syntax = syntax
+
+        # test disasm()
+        for i in xrange(1, TIMES):
+            while (True):
+                code = get_code(cfile, i * 4)
+                if code is None:
+                    break
+                #print to_hex(code)
+                cs(md, code)
+
+        # test disasm_lite()
+        cfile.seek(0)
+        for i in xrange(1, TIMES):
+            while (True):
+                code = get_code(cfile, i * 4)
+                if code is None:
+                    break
+                #print to_hex(code)
+                cs_lite(md, code)
+
+    except CsError as e:
+        print("ERROR: %s" %e)