1d8e051522
* Use correct event name * Add test for state.generate_testcase Test merely tests that this function publishes the 'will_generate_testcase' event * Properly test; make sure the callback executes and error if not This is the most convoluted unit test I've ever written. * "better"
214 lines
6.8 KiB
Python
214 lines
6.8 KiB
Python
import unittest
|
|
from manticore.utils.event import Eventful
|
|
from manticore.platforms import linux
|
|
from manticore.core.state import State
|
|
from manticore.core.smtlib import BitVecVariable, ConstraintSet
|
|
|
|
class _CallbackExecuted(Exception):
|
|
pass
|
|
|
|
|
|
class FakeMemory(object):
|
|
def __init__(self):
|
|
self._constraints = None
|
|
|
|
@property
|
|
def constraints(self):
|
|
return self._constraints
|
|
|
|
@constraints.setter
|
|
def constraints(self, constraints):
|
|
self._constraints = constraints
|
|
|
|
class FakeCpu(object):
|
|
def __init__(self):
|
|
self._memory = FakeMemory()
|
|
|
|
@property
|
|
def memory(self):
|
|
return self._memory
|
|
|
|
class FakePlatform(Eventful):
|
|
def __init__(self):
|
|
super(FakePlatform, self).__init__()
|
|
self._constraints = None
|
|
self.procs = [FakeCpu()]
|
|
|
|
|
|
|
|
def __getstate__(self):
|
|
state = super(FakePlatform, self).__getstate__()
|
|
state['cons'] = self._constraints
|
|
state['procs'] = self.procs
|
|
return state
|
|
def __setstate__(self, state):
|
|
super(FakePlatform, self).__setstate__(state)
|
|
self._constraints = state['cons']
|
|
self.procs = state['procs']
|
|
|
|
|
|
@property
|
|
def current(self):
|
|
return self.procs[0]
|
|
|
|
@property
|
|
def constraints(self):
|
|
return self._constraints
|
|
|
|
@constraints.setter
|
|
def constraints(self, constraints):
|
|
self._constraints = constraints
|
|
for proc in self.procs:
|
|
proc.memory.constraints = constraints
|
|
|
|
|
|
|
|
class StateTest(unittest.TestCase):
|
|
_multiprocess_can_split_ = True
|
|
def setUp(self):
|
|
l = linux.Linux('/bin/ls')
|
|
self.state = State(ConstraintSet(), l)
|
|
|
|
def test_solve_one(self):
|
|
val = 42
|
|
expr = BitVecVariable(32, 'tmp')
|
|
self.state.constrain(expr == val)
|
|
solved = self.state.solve_one(expr)
|
|
self.assertEqual(solved, val)
|
|
|
|
def test_solve_n(self):
|
|
expr = BitVecVariable(32, 'tmp')
|
|
self.state.constrain(expr > 4)
|
|
self.state.constrain(expr < 7)
|
|
solved = self.state.solve_n(expr, 2)
|
|
self.assertEqual(solved, [5,6])
|
|
|
|
def test_solve_n2(self):
|
|
expr = BitVecVariable(32, 'tmp')
|
|
self.state.constrain(expr > 4)
|
|
self.state.constrain(expr < 100)
|
|
solved = self.state.solve_n(expr, 5)
|
|
self.assertEqual(len(solved), 5)
|
|
|
|
def test_policy_one(self):
|
|
expr = BitVecVariable(32, 'tmp')
|
|
self.state.constrain(expr > 0)
|
|
self.state.constrain(expr < 100)
|
|
solved = self.state.concretize(expr, 'ONE')
|
|
self.assertEqual(len(solved), 1)
|
|
self.assertIn(solved[0], xrange(100))
|
|
|
|
def test_state(self):
|
|
constraints = ConstraintSet()
|
|
initial_state = State(constraints, FakePlatform())
|
|
|
|
arr = initial_state.symbolicate_buffer('+'*100, label='SYMBA')
|
|
initial_state.constrain(arr[0] > 0x41)
|
|
self.assertTrue(len(initial_state.constraints.declarations) == 1 )
|
|
with initial_state as new_state:
|
|
|
|
self.assertTrue(len(initial_state.constraints.declarations) == 1 )
|
|
self.assertTrue(len(new_state.constraints.declarations) == 1 )
|
|
arrb = new_state.symbolicate_buffer('+'*100, label='SYMBB')
|
|
|
|
self.assertTrue(len(initial_state.constraints.declarations) == 1 )
|
|
self.assertTrue(len(new_state.constraints.declarations) == 1 )
|
|
|
|
new_state.constrain(arrb[0] > 0x42)
|
|
|
|
|
|
self.assertTrue(len(new_state.constraints.declarations) == 2 )
|
|
|
|
|
|
self.assertTrue(len(initial_state.constraints.declarations) == 1 )
|
|
|
|
def test_new_symbolic_buffer(self):
|
|
length = 64
|
|
expr = self.state.new_symbolic_buffer(length)
|
|
self.assertEqual(len(expr), length)
|
|
|
|
def test_new_symbolic_value(self):
|
|
length = 64
|
|
expr = self.state.new_symbolic_value(length)
|
|
self.assertEqual(expr.size, length)
|
|
|
|
def test_new_bad_symbolic_value(self):
|
|
length = 62
|
|
with self.assertRaises(Exception):
|
|
expr = self.state.new_symbolic_value(length)
|
|
|
|
def test_tainted_symbolic_buffer(self):
|
|
taint = ('TEST_TAINT', )
|
|
expr = self.state.new_symbolic_buffer(64, taint=taint)
|
|
self.assertEqual(expr.taint, frozenset(taint))
|
|
|
|
def test_tainted_symbolic_value(self):
|
|
taint = ('TEST_TAINT', )
|
|
expr = self.state.new_symbolic_value(64, taint=taint)
|
|
self.assertEqual(expr.taint, frozenset(taint))
|
|
|
|
def testContextSerialization(self):
|
|
import cPickle as pickle
|
|
initial_file = ''
|
|
new_file = ''
|
|
new_new_file = ''
|
|
constraints = ConstraintSet()
|
|
initial_state = State(constraints, FakePlatform())
|
|
initial_state.context['step'] = 10
|
|
initial_file = pickle.dumps(initial_state)
|
|
with initial_state as new_state:
|
|
self.assertEqual( initial_state.context['step'], 10)
|
|
self.assertEqual( new_state.context['step'], 10)
|
|
|
|
new_state.context['step'] = 20
|
|
|
|
self.assertEqual( initial_state.context['step'], 10)
|
|
self.assertEqual( new_state.context['step'], 20)
|
|
new_file = pickle.dumps(new_state)
|
|
|
|
with new_state as new_new_state:
|
|
self.assertEqual( initial_state.context['step'], 10)
|
|
self.assertEqual( new_state.context['step'], 20)
|
|
self.assertEqual( new_new_state.context['step'], 20)
|
|
|
|
new_new_state.context['step'] += 10
|
|
|
|
self.assertEqual( initial_state.context['step'], 10)
|
|
self.assertEqual( new_state.context['step'], 20)
|
|
self.assertEqual( new_new_state.context['step'], 30)
|
|
|
|
new_new_file = pickle.dumps(new_new_state)
|
|
|
|
self.assertEqual( initial_state.context['step'], 10)
|
|
self.assertEqual( new_state.context['step'], 20)
|
|
self.assertEqual( new_new_state.context['step'], 30)
|
|
|
|
self.assertEqual( initial_state.context['step'], 10)
|
|
self.assertEqual( new_state.context['step'], 20)
|
|
|
|
self.assertEqual( initial_state.context['step'], 10)
|
|
|
|
del initial_state
|
|
del new_state
|
|
del new_new_state
|
|
|
|
|
|
|
|
initial_state = pickle.loads(initial_file)
|
|
self.assertEqual( initial_state.context['step'], 10)
|
|
new_state = pickle.loads(new_file)
|
|
self.assertEqual( new_state.context['step'], 20)
|
|
new_new_state = pickle.loads(new_new_file)
|
|
self.assertEqual( new_new_state.context['step'], 30)
|
|
|
|
|
|
def _test_state_gen_helper(self, name, msg):
|
|
self.assertEqual(name, 'statename')
|
|
self.assertEqual(msg, 'statemsg')
|
|
raise _CallbackExecuted
|
|
|
|
def test_state_gen(self):
|
|
self.state.subscribe('will_generate_testcase', self._test_state_gen_helper)
|
|
with self.assertRaises(_CallbackExecuted):
|
|
self.state.generate_testcase('statename', 'statemsg')
|