mirror of
https://github.com/cea-sec/miasm
synced 2026-06-21 13:48:18 +00:00
Ivan “CLOVIS” Canet
114 lines
5.0 KiB
Python
114 lines
5.0 KiB
Python
from miasm.analysis.data_flow import State
|
|
from miasm.expression.expression import *
|
|
|
|
"""
|
|
Test memory interferences
|
|
|
|
A memory interference may appear when two ExprMem objects relate to the same area of memory: editing one may impact the other.
|
|
"""
|
|
|
|
a32 = ExprId('a', 32)
|
|
b32 = ExprId('b', 32)
|
|
|
|
a64 = ExprId('a', 64)
|
|
b64 = ExprId('b', 64)
|
|
|
|
mem_a32_32 = ExprMem(a32, 32)
|
|
mem_b32_32 = ExprMem(b32, 32)
|
|
|
|
mem_a64_32 = ExprMem(a64, 32)
|
|
|
|
mem_a32_m1_8 = ExprMem(a32 + ExprInt(-1, 32), 8)
|
|
mem_a32_p0_8 = ExprMem(a32, 8)
|
|
mem_a32_p1_8 = ExprMem(a32 + ExprInt(1, 32), 8)
|
|
mem_a32_p2_8 = ExprMem(a32 + ExprInt(2, 32), 8)
|
|
mem_a32_p3_8 = ExprMem(a32 + ExprInt(3, 32), 8)
|
|
mem_a32_p4_8 = ExprMem(a32 + ExprInt(4, 32), 8)
|
|
|
|
|
|
mem_a32_m4_32 = ExprMem(a32 + ExprInt(-4, 32), 32)
|
|
mem_a32_m3_32 = ExprMem(a32 + ExprInt(-3, 32), 32)
|
|
mem_a32_m2_32 = ExprMem(a32 + ExprInt(-2, 32), 32)
|
|
mem_a32_m1_32 = ExprMem(a32 + ExprInt(-1, 32), 32)
|
|
mem_a32_p0_32 = ExprMem(a32, 32)
|
|
mem_a32_p1_32 = ExprMem(a32 + ExprInt(1, 32), 32)
|
|
mem_a32_p2_32 = ExprMem(a32 + ExprInt(2, 32), 32)
|
|
mem_a32_p3_32 = ExprMem(a32 + ExprInt(3, 32), 32)
|
|
mem_a32_p4_32 = ExprMem(a32 + ExprInt(4, 32), 32)
|
|
|
|
|
|
mem_a64_m4_32 = ExprMem(a64 + ExprInt(-4, 64), 32)
|
|
mem_a64_m3_32 = ExprMem(a64 + ExprInt(-3, 64), 32)
|
|
mem_a64_m2_32 = ExprMem(a64 + ExprInt(-2, 64), 32)
|
|
mem_a64_m1_32 = ExprMem(a64 + ExprInt(-1, 64), 32)
|
|
mem_a64_p0_32 = ExprMem(a64, 32)
|
|
mem_a64_p1_32 = ExprMem(a64 + ExprInt(1, 64), 32)
|
|
mem_a64_p2_32 = ExprMem(a64 + ExprInt(2, 64), 32)
|
|
mem_a64_p3_32 = ExprMem(a64 + ExprInt(3, 64), 32)
|
|
mem_a64_p4_32 = ExprMem(a64 + ExprInt(4, 64), 32)
|
|
|
|
|
|
state = State()
|
|
|
|
|
|
assert state.may_interfer(set([mem_a32_32]), mem_b32_32) == True
|
|
assert state.may_interfer(set([mem_b32_32]), mem_a32_32) == True
|
|
|
|
# Test 8 bit accesses
|
|
assert state.may_interfer(set([mem_a32_m1_8]), mem_a32_32) == False
|
|
assert state.may_interfer(set([mem_a32_p0_8]), mem_a32_32) == True
|
|
assert state.may_interfer(set([mem_a32_p1_8]), mem_a32_32) == True
|
|
assert state.may_interfer(set([mem_a32_p2_8]), mem_a32_32) == True
|
|
assert state.may_interfer(set([mem_a32_p3_8]), mem_a32_32) == True
|
|
assert state.may_interfer(set([mem_a32_p4_8]), mem_a32_32) == False
|
|
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_m1_8) == False
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_p0_8) == True
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_p1_8) == True
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_p2_8) == True
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_p3_8) == True
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_p4_8) == False
|
|
|
|
|
|
# Test 32 bit accesses
|
|
assert state.may_interfer(set([mem_a32_m4_32]), mem_a32_32) == False
|
|
assert state.may_interfer(set([mem_a32_m3_32]), mem_a32_32) == True
|
|
assert state.may_interfer(set([mem_a32_m2_32]), mem_a32_32) == True
|
|
assert state.may_interfer(set([mem_a32_m1_32]), mem_a32_32) == True
|
|
assert state.may_interfer(set([mem_a32_p0_32]), mem_a32_32) == True
|
|
assert state.may_interfer(set([mem_a32_p1_32]), mem_a32_32) == True
|
|
assert state.may_interfer(set([mem_a32_p2_32]), mem_a32_32) == True
|
|
assert state.may_interfer(set([mem_a32_p3_32]), mem_a32_32) == True
|
|
assert state.may_interfer(set([mem_a32_p4_32]), mem_a32_32) == False
|
|
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_m4_32) == False
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_m3_32) == True
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_m2_32) == True
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_m1_32) == True
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_p0_32) == True
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_p1_32) == True
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_p2_32) == True
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_p3_32) == True
|
|
assert state.may_interfer(set([mem_a32_32]), mem_a32_p4_32) == False
|
|
|
|
# Test 32 bit accesses with 64 bit memory address
|
|
assert state.may_interfer(set([mem_a64_m4_32]), mem_a64_32) == False
|
|
assert state.may_interfer(set([mem_a64_m3_32]), mem_a64_32) == True
|
|
assert state.may_interfer(set([mem_a64_m2_32]), mem_a64_32) == True
|
|
assert state.may_interfer(set([mem_a64_m1_32]), mem_a64_32) == True
|
|
assert state.may_interfer(set([mem_a64_p0_32]), mem_a64_32) == True
|
|
assert state.may_interfer(set([mem_a64_p1_32]), mem_a64_32) == True
|
|
assert state.may_interfer(set([mem_a64_p2_32]), mem_a64_32) == True
|
|
assert state.may_interfer(set([mem_a64_p3_32]), mem_a64_32) == True
|
|
assert state.may_interfer(set([mem_a64_p4_32]), mem_a64_32) == False
|
|
|
|
assert state.may_interfer(set([mem_a64_32]), mem_a64_m4_32) == False
|
|
assert state.may_interfer(set([mem_a64_32]), mem_a64_m3_32) == True
|
|
assert state.may_interfer(set([mem_a64_32]), mem_a64_m2_32) == True
|
|
assert state.may_interfer(set([mem_a64_32]), mem_a64_m1_32) == True
|
|
assert state.may_interfer(set([mem_a64_32]), mem_a64_p0_32) == True
|
|
assert state.may_interfer(set([mem_a64_32]), mem_a64_p1_32) == True
|
|
assert state.may_interfer(set([mem_a64_32]), mem_a64_p2_32) == True
|
|
assert state.may_interfer(set([mem_a64_32]), mem_a64_p3_32) == True
|
|
assert state.may_interfer(set([mem_a64_32]), mem_a64_p4_32) == False
|