summaryrefslogtreecommitdiff
path: root/tests/analysis/scan/sets.py
blob: 1d10fbf9b154501f21374599ac4277563e5e58c6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118

from common import RostTestClass


class TestRostSets(RostTestClass):
    """TestCases for sets support in ROST."""

    def testSetsAsBooleans(self):
        """Convert sets to boolean."""

        rule = '''
rule test {

   condition:
      ()

}
'''

        self.check_rule_failure(rule)


        rule = '''
rule test {

   condition:
      (1, )

}
'''

        self.check_rule_success(rule)


        rule = '''
rule test {

   condition:
      ("aaa", true, 123)

}
'''

        self.check_rule_success(rule)


    def testStringAsArray(self):
        """Handle strings as arrays."""

        rule = '''
rule test {

   condition:
      count("aaa")

}
'''

        self.check_rule_success(rule)


        rule = '''
rule test {

   condition:
      count("aaa") == 3

}
'''

        self.check_rule_success(rule)


    def testSetsIntersections(self):
        """Perform sets intersections."""

        rule = '''
rule test {

   condition:
      ("aaa", "bbb") in ("AAA", "BBB", "aaa")

}
'''

        self.check_rule_success(rule)


        rule = '''
rule test {

   condition:
      ("aaa", "bbb") in ("123", )

}
'''

        self.check_rule_failure(rule)













        # TODO :

        # test : intersection(a, a) == a

        # test : "123" in "0123456789"
        # test : "123" in "012987"