from common import RostTestClass
from pychrysalide.analysis.contents import MemoryContent


class TestRostFunctions(RostTestClass):
    """TestCases for the core functions of ROST."""

    # Core
    # ====

    def testDatasize(self):
        """Handle the size of the provided data."""

        cnt = MemoryContent(b'\x01\x02\x03\x04')

        cases = [
            'datasize == 4',
            'uint16(0) == 0x201 and uint16(datasize - 2) == 0x0403',
        ]

        for c in cases:

            rule = '''
rule test {

   condition:
      %s

}
''' % c

            self.check_rule_success(rule, cnt)


    # Modules
    # =======

    def testConsole(self):
        """Ensure logging always returns true."""

        rule = '''
rule test {

   condition:
      console.log()

}
'''

        self.check_rule_success(rule)


    def testMagic(self):
        """Scan text content with the Magic module."""

        cnt = MemoryContent(b'aaaa')

        cases = [
            [ 'type', 'ASCII text, with no line terminators' ],
            [ 'mime_encoding', 'us-ascii' ],
            [ 'mime_type', 'text/plain' ],
        ]

        for target, expected in cases:

            rule = '''
rule test {

   condition:
      magic.%s() == "%s"

}
''' % (target, expected)

            self.check_rule_success(rule, cnt)


    def testTime(self):
        """Check current time."""

        # Cf. https://www.epochconverter.com/

        rule = '''
rule test {

   condition:
      time.make(2023, 8, 5, 22, 8, 41) == 0x64cec869

}
'''

        self.check_rule_success(rule)

        rule = '''
rule test {

   condition:
      time.now() >= 0x64cec874 and time.now() <= time.now()

}
'''

        self.check_rule_success(rule)