import unittest from manticore.utils.event import Eventful from manticore.platforms import linux from manticore.core.state import State from manticore.core.smtlib import BitVecVariable, ConstraintSet class _CallbackExecuted(Exception): pass class FakeMemory(object): def __init__(self): self._constraints = None @property def constraints(self): return self._constraints @constraints.setter def constraints(self, constraints): self._constraints = constraints class FakeCpu(object): def __init__(self): self._memory = FakeMemory() @property def memory(self): return self._memory class FakePlatform(Eventful): def __init__(self): super(FakePlatform, self).__init__() self._constraints = None self.procs = [FakeCpu()] def __getstate__(self): state = super(FakePlatform, self).__getstate__() state['cons'] = self._constraints state['procs'] = self.procs return state def __setstate__(self, state): super(FakePlatform, self).__setstate__(state) self._constraints = state['cons'] self.procs = state['procs'] @property def current(self): return self.procs[0] @property def constraints(self): return self._constraints @constraints.setter def constraints(self, constraints): self._constraints = constraints for proc in self.procs: proc.memory.constraints = constraints class StateTest(unittest.TestCase): _multiprocess_can_split_ = True def setUp(self): l = linux.Linux('/bin/ls') self.state = State(ConstraintSet(), l) def test_solve_one(self): val = 42 expr = BitVecVariable(32, 'tmp') self.state.constrain(expr == val) solved = self.state.solve_one(expr) self.assertEqual(solved, val) def test_solve_n(self): expr = BitVecVariable(32, 'tmp') self.state.constrain(expr > 4) self.state.constrain(expr < 7) solved = self.state.solve_n(expr, 2) self.assertEqual(solved, [5,6]) def test_solve_n2(self): expr = BitVecVariable(32, 'tmp') self.state.constrain(expr > 4) self.state.constrain(expr < 100) solved = self.state.solve_n(expr, 5) self.assertEqual(len(solved), 5) def test_policy_one(self): expr = BitVecVariable(32, 'tmp') self.state.constrain(expr > 0) self.state.constrain(expr < 100) solved = self.state.concretize(expr, 'ONE') self.assertEqual(len(solved), 1) self.assertIn(solved[0], xrange(100)) def test_state(self): constraints = ConstraintSet() initial_state = State(constraints, FakePlatform()) arr = initial_state.symbolicate_buffer('+'*100, label='SYMBA') initial_state.constrain(arr[0] > 0x41) self.assertTrue(len(initial_state.constraints.declarations) == 1 ) with initial_state as new_state: self.assertTrue(len(initial_state.constraints.declarations) == 1 ) self.assertTrue(len(new_state.constraints.declarations) == 1 ) arrb = new_state.symbolicate_buffer('+'*100, label='SYMBB') self.assertTrue(len(initial_state.constraints.declarations) == 1 ) self.assertTrue(len(new_state.constraints.declarations) == 1 ) new_state.constrain(arrb[0] > 0x42) self.assertTrue(len(new_state.constraints.declarations) == 2 ) self.assertTrue(len(initial_state.constraints.declarations) == 1 ) def test_new_symbolic_buffer(self): length = 64 expr = self.state.new_symbolic_buffer(length) self.assertEqual(len(expr), length) def test_new_symbolic_value(self): length = 64 expr = self.state.new_symbolic_value(length) self.assertEqual(expr.size, length) def test_new_bad_symbolic_value(self): length = 62 with self.assertRaises(Exception): expr = self.state.new_symbolic_value(length) def test_tainted_symbolic_buffer(self): taint = ('TEST_TAINT', ) expr = self.state.new_symbolic_buffer(64, taint=taint) self.assertEqual(expr.taint, frozenset(taint)) def test_tainted_symbolic_value(self): taint = ('TEST_TAINT', ) expr = self.state.new_symbolic_value(64, taint=taint) self.assertEqual(expr.taint, frozenset(taint)) def testContextSerialization(self): import cPickle as pickle initial_file = '' new_file = '' new_new_file = '' constraints = ConstraintSet() initial_state = State(constraints, FakePlatform()) initial_state.context['step'] = 10 initial_file = pickle.dumps(initial_state) with initial_state as new_state: self.assertEqual( initial_state.context['step'], 10) self.assertEqual( new_state.context['step'], 10) new_state.context['step'] = 20 self.assertEqual( initial_state.context['step'], 10) self.assertEqual( new_state.context['step'], 20) new_file = pickle.dumps(new_state) with new_state as new_new_state: self.assertEqual( initial_state.context['step'], 10) self.assertEqual( new_state.context['step'], 20) self.assertEqual( new_new_state.context['step'], 20) new_new_state.context['step'] += 10 self.assertEqual( initial_state.context['step'], 10) self.assertEqual( new_state.context['step'], 20) self.assertEqual( new_new_state.context['step'], 30) new_new_file = pickle.dumps(new_new_state) self.assertEqual( initial_state.context['step'], 10) self.assertEqual( new_state.context['step'], 20) self.assertEqual( new_new_state.context['step'], 30) self.assertEqual( initial_state.context['step'], 10) self.assertEqual( new_state.context['step'], 20) self.assertEqual( initial_state.context['step'], 10) del initial_state del new_state del new_new_state initial_state = pickle.loads(initial_file) self.assertEqual( initial_state.context['step'], 10) new_state = pickle.loads(new_file) self.assertEqual( new_state.context['step'], 20) new_new_state = pickle.loads(new_new_file) self.assertEqual( new_new_state.context['step'], 30) def _test_state_gen_helper(self, name, msg): self.assertEqual(name, 'statename') self.assertEqual(msg, 'statemsg') raise _CallbackExecuted def testContextSerialization(self): import cPickle as pickle initial_file = '' new_file = '' new_new_file = '' constraints = ConstraintSet() initial_state = State(constraints, FakePlatform()) initial_state.context['step'] = 10 initial_file = pickle.dumps(initial_state) with initial_state as new_state: self.assertEqual( initial_state.context['step'], 10) self.assertEqual( new_state.context['step'], 10) new_state.context['step'] = 20 self.assertEqual( initial_state.context['step'], 10) self.assertEqual( new_state.context['step'], 20) new_file = pickle.dumps(new_state) with new_state as new_new_state: self.assertEqual( initial_state.context['step'], 10) self.assertEqual( new_state.context['step'], 20) self.assertEqual( new_new_state.context['step'], 20) new_new_state.context['step'] += 10 self.assertEqual( initial_state.context['step'], 10) self.assertEqual( new_state.context['step'], 20) self.assertEqual( new_new_state.context['step'], 30) new_new_file = pickle.dumps(new_new_state) self.assertEqual( initial_state.context['step'], 10) self.assertEqual( new_state.context['step'], 20) self.assertEqual( new_new_state.context['step'], 30) self.assertEqual( initial_state.context['step'], 10) self.assertEqual( new_state.context['step'], 20) self.assertEqual( initial_state.context['step'], 10) del initial_state del new_state del new_new_state initial_state = pickle.loads(initial_file) self.assertEqual( initial_state.context['step'], 10) new_state = pickle.loads(new_file) self.assertEqual( new_state.context['step'], 20) new_new_state = pickle.loads(new_new_file) self.assertEqual( new_new_state.context['step'], 30) def test_state_gen(self): self.state.subscribe('will_generate_testcase', self._test_state_gen_helper) with self.assertRaises(_CallbackExecuted): self.state.generate_testcase('statename', 'statemsg')