- Introduce the following new methods: * `rz_analysis_similarity_basic_block()` * `rz_analysis_similarity_function()` * `rz_analysis_similarity_basic_block_2()` * `rz_analysis_similarity_function_2()` * `rz_analysis_match_basic_blocks()` * `rz_analysis_match_functions()` * `rz_analysis_match_basic_blocks_2()` * `rz_analysis_match_functions_2()` - Remove `RzAnalysisDiff` and its usages - Remove `librz/analysis/diff.c` entirely to and adds `librz/analysis/similarity.c` - Remove a lot of unused structures and simplified the code by a lot - Fix typo in levenshtein - Remove `librz/core/gdiff.c` and `gdiff` functions since they were unused or only used in rz-diff - Remove `difftype` (or "color") from `RzANode` which lead to dead code - Decrease serialized data in projects. - Add `RzAnalysisVarKind` and `RzAnalysisVarType` and replaces all the hardcoded values - Remove command `agd` - Remove all `rz_core_gdiff` usages from `rz_core.h` - Refactor `rz_analysis_var_list` and `rz_analysis_var_count` due unused argument (`RzAnalysis` was not used) - Add new method `rz_analysis_var_count_total` to simplify some usages - Remove `rz_core_graph_diff` - Add `typedef RzAnalysisFcnType` on `enum``used for function types - Remove unused `RZ_ANALYSIS_FCN_VARKIND_LOCAL` - Remove from `RzAnalysisFunction` the following variables: * `fingerprint` * `fingerprint_size` * `diff` * `diff_ops` * `diff_thbb` * `diff_thfcn` - Remove from `RzAnalysisBlock` the following variables: * `fingerprint` * `diff` - Remove `RZ_ANALYSIS_THRESHOLDBB` and `RZ_ANALYSIS_THRESHOLDFCN` - Remove the following callbacks from `RzAnalysisPlugin` * `RzAnalysisDiffBBCallback` * `RzAnalysisDiffFcnCallback` * `RzAnalysisDiffEvalCallback` - Fix fancy table columns/rows when a color string is in a cell - Bumped project version to 9
336 lines
11 KiB
C
336 lines
11 KiB
C
// SPDX-FileCopyrightText: 2020 Florian Märkl <info@florianmaerkl.de>
|
|
// SPDX-License-Identifier: LGPL-3.0-only
|
|
|
|
#include <rz_analysis.h>
|
|
#include "minunit.h"
|
|
|
|
#include "test_analysis_block_invars.inl"
|
|
|
|
static void setup_types_db(RzTypeDB *typedb) {
|
|
RzBaseType *b_int_t = rz_type_base_type_new(RZ_BASE_TYPE_KIND_ATOMIC);
|
|
if (!b_int_t) {
|
|
return;
|
|
}
|
|
b_int_t->name = strdup("int");
|
|
b_int_t->size = 32;
|
|
rz_type_db_save_base_type(typedb, b_int_t);
|
|
}
|
|
|
|
static void setup_sdb_for_function(Sdb *res) {
|
|
sdb_set(res, "ExitProcess", "func", 0);
|
|
sdb_num_set(res, "func.ExitProcess.args", 0, 0);
|
|
sdb_set(res, "func.ExitProcess.ret", "void", 0);
|
|
sdb_set(res, "ReadFile", "func", 0);
|
|
sdb_num_set(res, "func.ReadFile.args", 0, 0);
|
|
sdb_set(res, "func.ReadFile.ret", "void", 0);
|
|
sdb_set(res, "memcpy", "func", 0);
|
|
sdb_num_set(res, "func.memcpy.args", 0, 0);
|
|
sdb_set(res, "func.memcpy.ret", "void", 0);
|
|
sdb_set(res, "strchr", "func", 0);
|
|
sdb_num_set(res, "func.strchr.args", 0, 0);
|
|
sdb_set(res, "func.strchr.ret", "void", 0);
|
|
sdb_set(res, "__stack_chk_fail", "func", 0);
|
|
sdb_num_set(res, "func.__stack_chk_fail.args", 0, 0);
|
|
sdb_set(res, "func.__stack_chk_fail.ret", "void", 0);
|
|
sdb_set(res, "WSAStartup", "func", 0);
|
|
sdb_num_set(res, "func.WSAStartup.args", 0, 0);
|
|
sdb_set(res, "func.WSAStartup.ret", "void", 0);
|
|
}
|
|
|
|
bool ht_up_count(void *user, const ut64 k, const void *v) {
|
|
size_t *count = user;
|
|
(*count)++;
|
|
return true;
|
|
}
|
|
|
|
bool ht_pp_count(void *user, const void *k, const void *v) {
|
|
size_t *count = user;
|
|
(*count)++;
|
|
return true;
|
|
}
|
|
|
|
static bool function_check_invariants(RzAnalysis *analysis) {
|
|
if (!block_check_invariants(analysis)) {
|
|
return false;
|
|
}
|
|
|
|
RzListIter *it;
|
|
RzAnalysisFunction *fcn;
|
|
rz_list_foreach (analysis->fcns, it, fcn) {
|
|
mu_assert_ptreq(ht_up_find(analysis->ht_addr_fun, fcn->addr, NULL), fcn, "function in addr ht");
|
|
mu_assert_ptreq(ht_pp_find(analysis->ht_name_fun, fcn->name, NULL), fcn, "function in name ht");
|
|
}
|
|
|
|
size_t addr_count = 0;
|
|
ht_up_foreach(analysis->ht_addr_fun, ht_up_count, &addr_count);
|
|
mu_assert_eq(addr_count, rz_list_length(analysis->fcns), "function addr ht count");
|
|
|
|
size_t name_count = 0;
|
|
ht_pp_foreach(analysis->ht_name_fun, ht_pp_count, &name_count);
|
|
mu_assert_eq(name_count, rz_list_length(analysis->fcns), "function name ht count");
|
|
|
|
return true;
|
|
}
|
|
|
|
#define check_invariants function_check_invariants
|
|
#define check_leaks block_check_leaks
|
|
|
|
#define assert_invariants(analysis) \
|
|
do { \
|
|
if (!check_invariants(analysis)) { \
|
|
return false; \
|
|
} \
|
|
} while (0)
|
|
#define assert_leaks(analysis) \
|
|
do { \
|
|
if (!check_leaks(analysis)) { \
|
|
return false; \
|
|
} \
|
|
} while (0)
|
|
|
|
bool test_rz_analysis_function_relocate() {
|
|
RzAnalysis *analysis = rz_analysis_new();
|
|
assert_invariants(analysis);
|
|
|
|
RzAnalysisFunction *fa = rz_analysis_create_function(analysis, "do_something", 0x1337, RZ_ANALYSIS_FCN_TYPE_NULL);
|
|
assert_invariants(analysis);
|
|
RzAnalysisFunction *fb = rz_analysis_create_function(analysis, "do_something_else", 0xdeadbeef, RZ_ANALYSIS_FCN_TYPE_NULL);
|
|
assert_invariants(analysis);
|
|
rz_analysis_create_function(analysis, "do_something_different", 0xc0ffee, RZ_ANALYSIS_FCN_TYPE_NULL);
|
|
assert_invariants(analysis);
|
|
|
|
bool success = rz_analysis_function_relocate(fa, fb->addr);
|
|
assert_invariants(analysis);
|
|
mu_assert_false(success, "failed relocate");
|
|
mu_assert_eq(fa->addr, 0x1337, "failed relocate addr");
|
|
|
|
success = rz_analysis_function_relocate(fa, 0x1234);
|
|
assert_invariants(analysis);
|
|
mu_assert_true(success, "successful relocate");
|
|
mu_assert_eq(fa->addr, 0x1234, "successful relocate addr");
|
|
|
|
assert_leaks(analysis);
|
|
rz_analysis_free(analysis);
|
|
mu_end;
|
|
}
|
|
|
|
bool test_rz_analysis_function_labels() {
|
|
RzAnalysis *analysis = rz_analysis_new();
|
|
|
|
RzAnalysisFunction *f = rz_analysis_create_function(analysis, "do_something", 0x1337, RZ_ANALYSIS_FCN_TYPE_NULL);
|
|
|
|
bool s = rz_analysis_function_set_label(f, "smartfriend", 0x1339);
|
|
mu_assert_true(s, "set label");
|
|
s = rz_analysis_function_set_label(f, "stray", 0x133c);
|
|
mu_assert_true(s, "set label");
|
|
s = rz_analysis_function_set_label(f, "the", 0x1340);
|
|
mu_assert_true(s, "set label");
|
|
s = rz_analysis_function_set_label(f, "stray", 0x1234);
|
|
mu_assert_false(s, "set label (existing name)");
|
|
s = rz_analysis_function_set_label(f, "henlo", 0x133c);
|
|
mu_assert_false(s, "set label (existing addr)");
|
|
|
|
ut64 addr = rz_analysis_function_get_label(f, "smartfriend");
|
|
mu_assert_eq(addr, 0x1339, "get label");
|
|
addr = rz_analysis_function_get_label(f, "stray");
|
|
mu_assert_eq(addr, 0x133c, "get label");
|
|
addr = rz_analysis_function_get_label(f, "skies");
|
|
mu_assert_eq(addr, UT64_MAX, "get label (unknown)");
|
|
|
|
const char *name = rz_analysis_function_get_label_at(f, 0x1339);
|
|
mu_assert_streq(name, "smartfriend", "get label at");
|
|
name = rz_analysis_function_get_label_at(f, 0x133c);
|
|
mu_assert_streq(name, "stray", "get label at");
|
|
name = rz_analysis_function_get_label_at(f, 0x1234);
|
|
mu_assert_null(name, "get label at (unknown)");
|
|
|
|
rz_analysis_function_delete_label(f, "stray");
|
|
addr = rz_analysis_function_get_label(f, "stray");
|
|
mu_assert_eq(addr, UT64_MAX, "get label (deleted)");
|
|
name = rz_analysis_function_get_label_at(f, 0x133c);
|
|
mu_assert_null(name, "get label at (deleted)");
|
|
addr = rz_analysis_function_get_label(f, "smartfriend");
|
|
mu_assert_eq(addr, 0x1339, "get label (unaffected by delete)");
|
|
name = rz_analysis_function_get_label_at(f, 0x1339);
|
|
mu_assert_streq(name, "smartfriend", "get label at (unaffected by delete)");
|
|
|
|
rz_analysis_function_delete_label_at(f, 0x1340);
|
|
addr = rz_analysis_function_get_label(f, "the");
|
|
mu_assert_eq(addr, UT64_MAX, "get label (deleted)");
|
|
name = rz_analysis_function_get_label_at(f, 0x340);
|
|
mu_assert_null(name, "get label at (deleted)");
|
|
addr = rz_analysis_function_get_label(f, "smartfriend");
|
|
mu_assert_eq(addr, 0x1339, "get label (unaffected by delete)");
|
|
name = rz_analysis_function_get_label_at(f, 0x1339);
|
|
mu_assert_streq(name, "smartfriend", "get label at (unaffected by delete)");
|
|
|
|
rz_analysis_free(analysis);
|
|
mu_end;
|
|
}
|
|
|
|
bool test_dll_names(void) {
|
|
RzTypeDB *typedb = rz_type_db_new();
|
|
mu_assert_notnull(typedb, "Couldn't create new RzTypeDB");
|
|
|
|
setup_types_db(typedb);
|
|
Sdb *sdb = sdb_new0();
|
|
setup_sdb_for_function(sdb);
|
|
rz_serialize_callables_load(sdb, typedb, NULL);
|
|
sdb_free(sdb);
|
|
|
|
char *s;
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "sub.KERNEL32.dll_ExitProcess");
|
|
mu_assert_notnull(s, "dll_ should be ignored");
|
|
mu_assert_streq(s, "ExitProcess", "dll_ should be ignored");
|
|
free(s);
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "sub.dll_ExitProcess_32");
|
|
mu_assert_notnull(s, "number should be ignored");
|
|
mu_assert_streq(s, "ExitProcess", "number should be ignored");
|
|
free(s);
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "sym.imp.KERNEL32.dll_ReadFile");
|
|
mu_assert_notnull(s, "dll_ and number should be ignored case 1");
|
|
mu_assert_streq(s, "ReadFile", "dll_ and number should be ignored case 1");
|
|
free(s);
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "sub.VCRUNTIME14.dll_memcpy");
|
|
mu_assert_notnull(s, "dll_ and number should be ignored case 2");
|
|
mu_assert_streq(s, "memcpy", "dll_ and number should be ignored case 2");
|
|
free(s);
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "sub.KERNEL32.dll_ExitProcess_32");
|
|
mu_assert_notnull(s, "dll_ and number should be ignored case 3");
|
|
mu_assert_streq(s, "ExitProcess", "dll_ and number should be ignored case 3");
|
|
free(s);
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "WS2_32.dll_WSAStartup");
|
|
mu_assert_notnull(s, "dll_ and number should be ignored case 4");
|
|
mu_assert_streq(s, "WSAStartup", "dll_ and number should be ignored case 4");
|
|
free(s);
|
|
|
|
rz_type_db_free(typedb);
|
|
mu_end;
|
|
}
|
|
|
|
bool test_ignore_prefixes(void) {
|
|
RzTypeDB *typedb = rz_type_db_new();
|
|
mu_assert_notnull(typedb, "Couldn't create new RzTypeDB");
|
|
|
|
setup_types_db(typedb);
|
|
Sdb *sdb = sdb_new0();
|
|
setup_sdb_for_function(sdb);
|
|
rz_serialize_callables_load(sdb, typedb, NULL);
|
|
sdb_free(sdb);
|
|
|
|
char *s;
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "fcn.KERNEL32.dll_ExitProcess_32");
|
|
mu_assert_null(s, "fcn. names should be ignored");
|
|
free(s);
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "loc.KERNEL32.dll_ExitProcess_32");
|
|
mu_assert_null(s, "loc. names should be ignored");
|
|
free(s);
|
|
|
|
rz_type_db_free(typedb);
|
|
mu_end;
|
|
}
|
|
|
|
bool test_remove_rz_prefixes(void) {
|
|
RzTypeDB *typedb = rz_type_db_new();
|
|
mu_assert_notnull(typedb, "Couldn't create new RzTypeDB");
|
|
|
|
setup_types_db(typedb);
|
|
Sdb *sdb = sdb_new0();
|
|
setup_sdb_for_function(sdb);
|
|
rz_serialize_callables_load(sdb, typedb, NULL);
|
|
sdb_free(sdb);
|
|
|
|
char *s;
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "sym.imp.ExitProcess");
|
|
mu_assert_notnull(s, "sym.imp should be ignored");
|
|
mu_assert_streq(s, "ExitProcess", "sym.imp should be ignored");
|
|
free(s);
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "sym.imp.fcn.ExitProcess");
|
|
mu_assert_notnull(s, "sym.imp.fcn should be ignored");
|
|
mu_assert_streq(s, "ExitProcess", "sym.imp.fcn should be ignored");
|
|
free(s);
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "longprefix.ExitProcess");
|
|
mu_assert_null(s, "prefixes longer than 3 should not be ignored");
|
|
free(s);
|
|
|
|
rz_type_db_free(typedb);
|
|
mu_end;
|
|
}
|
|
|
|
bool test_autonames(void) {
|
|
RzTypeDB *typedb = rz_type_db_new();
|
|
mu_assert_notnull(typedb, "Couldn't create new RzTypeDB");
|
|
|
|
setup_types_db(typedb);
|
|
Sdb *sdb = sdb_new0();
|
|
setup_sdb_for_function(sdb);
|
|
rz_serialize_callables_load(sdb, typedb, NULL);
|
|
sdb_free(sdb);
|
|
|
|
char *s;
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "sub.strchr_123");
|
|
mu_assert_null(s, "function that calls common fcns shouldn't be identified as such");
|
|
free(s);
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "sub.__strchr_123");
|
|
mu_assert_null(s, "initial _ should not confuse the api");
|
|
free(s);
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "sub.__stack_chk_fail_740");
|
|
mu_assert_null(s, "initial _ should not confuse the api");
|
|
free(s);
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "sym.imp.strchr");
|
|
mu_assert_notnull(s, "sym.imp. should be ignored");
|
|
mu_assert_streq(s, "strchr", "strchr should be identified");
|
|
free(s);
|
|
|
|
rz_type_db_free(typedb);
|
|
mu_end;
|
|
}
|
|
|
|
bool test_initial_underscore(void) {
|
|
RzTypeDB *typedb = rz_type_db_new();
|
|
mu_assert_notnull(typedb, "Couldn't create new RzTypeDB");
|
|
|
|
setup_types_db(typedb);
|
|
Sdb *sdb = sdb_new0();
|
|
setup_sdb_for_function(sdb);
|
|
rz_serialize_callables_load(sdb, typedb, NULL);
|
|
sdb_free(sdb);
|
|
|
|
char *s;
|
|
|
|
s = rz_analysis_function_name_guess(typedb, "sym._strchr");
|
|
mu_assert_notnull(s, "sym._ should be ignored");
|
|
mu_assert_streq(s, "strchr", "strchr should be identified");
|
|
free(s);
|
|
|
|
rz_type_db_free(typedb);
|
|
mu_end;
|
|
}
|
|
|
|
int all_tests() {
|
|
mu_run_test(test_rz_analysis_function_relocate);
|
|
mu_run_test(test_rz_analysis_function_labels);
|
|
mu_run_test(test_ignore_prefixes);
|
|
mu_run_test(test_remove_rz_prefixes);
|
|
mu_run_test(test_dll_names);
|
|
mu_run_test(test_autonames);
|
|
mu_run_test(test_initial_underscore);
|
|
return tests_passed != tests_run;
|
|
}
|
|
|
|
mu_main(all_tests)
|