mirror of
https://github.com/hugsy/gef.git
synced 2026-10-12 02:15:57 +00:00
crazy hugsyandGrazfather
bcaabff1d8
This is a major PR, but long overdue. GEF can now use RPyC to completely control the tests which not only make them way faster, also allow to control directly from the `pytest` tests themselves `gdb` and `gef` (see examples). Tests are therefore smaller, less messy, and more accurate than when using the legacy function `gdb_run_cmd`. The documentation in `docs/testing.md` has been updated accordingly. This allowed to find a few missing things in gef.py itself, which were added but nothing major. Note that currently the PR is not perfect as I did not re-write the tests: I've migrated most of the code to the new API to ensure coverage stays identical. This was done because the PR is already big enough as it is. More accurate tests can be added in following PRs. Co-authored-by: Grazfather <[email protected]>
95 lines
3.1 KiB
Python
95 lines
3.1 KiB
Python
"""
|
|
Pattern commands test module
|
|
"""
|
|
import pytest
|
|
|
|
from tests.base import RemoteGefUnitTestGeneric
|
|
from tests.utils import ARCH, debug_target, is_64b
|
|
|
|
|
|
class PatternCommand(RemoteGefUnitTestGeneric):
|
|
"""`pattern` command test module"""
|
|
|
|
def setUp(self) -> None:
|
|
self._target = debug_target("pattern")
|
|
return super().setUp()
|
|
|
|
def test_cmd_pattern_create(self):
|
|
gdb = self._gdb
|
|
cmd = "pattern create -n 4 32"
|
|
res = gdb.execute(cmd, to_string=True).strip()
|
|
self.assertIn("aaaabaaacaaadaaaeaaaf", res)
|
|
|
|
cmd = "pattern create -n 8 32"
|
|
res = gdb.execute(cmd, to_string=True).strip()
|
|
self.assertIn("aaaaaaaabaaaaaaacaaaaaaadaaaaaaa", res)
|
|
|
|
@pytest.mark.skipif(
|
|
ARCH not in ("x86_64", "aarch64", "i686", "armv7l"),
|
|
reason=f"Skipped for {ARCH}",
|
|
)
|
|
def test_cmd_pattern_search(self):
|
|
gdb = self._gdb
|
|
if ARCH == "aarch64":
|
|
lookup_register = "$x30"
|
|
expected_offsets = (16, 16, 5, 9)
|
|
elif ARCH == "armv7l":
|
|
lookup_register = "$r11"
|
|
expected_offsets = (8, 8, 5, 9)
|
|
elif ARCH == "x86_64":
|
|
lookup_register = "$rbp"
|
|
expected_offsets = (8, 8, 5, 9)
|
|
elif ARCH == "i686":
|
|
lookup_register = "$ebp"
|
|
# expected_offsets = (16, None, 5, 9)
|
|
expected_offsets = (16, 16, 5, 9)
|
|
else:
|
|
raise ValueError("Invalid architecture")
|
|
|
|
# 0
|
|
cmd = f"pattern search -n 4 {lookup_register}"
|
|
gdb.execute("set args aaaabaaacaaadaaaeaaafaaagaaahaaa")
|
|
gdb.execute("run")
|
|
res = gdb.execute(cmd, to_string=True)
|
|
self.assertIn(
|
|
f"Found at offset {expected_offsets[0]} (little-endian search) likely", res
|
|
)
|
|
|
|
# 1
|
|
if is_64b():
|
|
cmd = f"pattern search -n 8 {lookup_register}"
|
|
gdb.execute("set args aaaaaaaabaaaaaaacaaaaaaadaaaaaaa")
|
|
gdb.execute("run")
|
|
res = gdb.execute(cmd, to_string=True)
|
|
self.assertIn(
|
|
f"Found at offset {expected_offsets[1]} (little-endian search) likely",
|
|
res,
|
|
)
|
|
|
|
# 2
|
|
cmd = "pattern search -n 4 caaa"
|
|
gdb.execute("set args aaaabaaacaaadaaaeaaafaaagaaahaaa")
|
|
gdb.execute("run")
|
|
res = gdb.execute(cmd, to_string=True)
|
|
self.assertIn(
|
|
f"Found at offset {expected_offsets[2]} (little-endian search) likely", res
|
|
)
|
|
|
|
# 3
|
|
if is_64b():
|
|
cmd = "pattern search -n 8 caaaaaaa"
|
|
gdb.execute("set args aaaaaaaabaaaaaaacaaaaaaadaaaaaaa")
|
|
gdb.execute("run")
|
|
res = gdb.execute(cmd, to_string=True)
|
|
self.assertIn(
|
|
f"Found at offset {expected_offsets[3]} (little-endian search) likely",
|
|
res,
|
|
)
|
|
|
|
# 4
|
|
cmd = "pattern search -n 4 JUNK"
|
|
gdb.execute("set args aaaabaaacaaadaaaeaaafaaagaaahaaa")
|
|
gdb.execute("run")
|
|
res = gdb.execute(cmd, to_string=True)
|
|
self.assertIn(f"not found", res)
|