1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
#!/usr/bin/python3-dbg
# -*- coding: utf-8 -*-
# Tests minimalistes pour valider l'intégration des contenus résidant
# en mémoire depuis Python.
from chrysacase import ChrysalideTestCase
from pychrysalide import arch
from pychrysalide.analysis.contents import MemoryContent
from pychrysalide.arch import vmpa, mrange
class TestMemoryContent(ChrysalideTestCase):
"""TestCase for analysis.contents.MemoryContent."""
def testSimpleAccess(self):
"""Check valid accesses to memory content."""
data = b'\x01\x02\x03\x04'
data += b'\x05\x06\x07\x08'
data += b'\x11\x12\x13\x00'
data += b'\x15\x16\x17\x18'
data += b'\x21\x22\x23\x24'
data += b'\x25\x26\x27\x28'
data += b'\x31\x32\x00\x34'
data += b'\x35\x36\x37\x38'
cnt = MemoryContent(data)
start = vmpa(4, vmpa.VMPA_NO_VIRTUAL)
val = cnt.read_u8(start)
self.assertEqual(val, 0x05)
val = cnt.read_u8(start)
self.assertEqual(val, 0x06)
start = vmpa(14, vmpa.VMPA_NO_VIRTUAL)
val = cnt.read_u16(start, arch.SRE_LITTLE)
self.assertEqual(val, 0x1817)
start = vmpa(10, vmpa.VMPA_NO_VIRTUAL)
val = cnt.read_u32(start, arch.SRE_LITTLE)
self.assertEqual(val, 0x16150013)
def testWrongAccess(self):
"""Check invalid accesses to memory content."""
data = b'\x35'
cnt = MemoryContent(data)
with self.assertRaisesRegex(Exception, 'Invalid read access.'):
start = vmpa(1, vmpa.VMPA_NO_VIRTUAL)
val = cnt.read_u8(start)
with self.assertRaisesRegex(Exception, 'Invalid read access.'):
start = vmpa(0, vmpa.VMPA_NO_VIRTUAL)
val = cnt.read_u16(start, arch.SRE_LITTLE)
|
