1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
|
#-------------------------------------------------------------------------------
# elftools tests
#
# Eli Bendersky (eliben@gmail.com)
# This code is in the public domain
#-------------------------------------------------------------------------------
import unittest
from elftools.dwarf.descriptions import ExprDumper, set_global_machine_arch
from elftools.dwarf.dwarf_expr import DWARFExprParser, DWARFExprOp
from elftools.dwarf.structs import DWARFStructs
class TestExprDumper(unittest.TestCase):
structs32 = DWARFStructs(
little_endian=True,
dwarf_format=32,
address_size=4)
def setUp(self):
self.visitor = ExprDumper(self.structs32)
set_global_machine_arch('x64')
def test_basic_single(self):
self.assertEqual(self.visitor.dump_expr([0x1b]),
'DW_OP_div')
self.assertEqual(self.visitor.dump_expr([0x74, 0x82, 0x01]),
'DW_OP_breg4 (rsi): 130')
self.assertEqual(self.visitor.dump_expr([0x91, 0x82, 0x01]),
'DW_OP_fbreg: 130')
self.assertEqual(self.visitor.dump_expr([0x51]),
'DW_OP_reg1 (rdx)')
self.assertEqual(self.visitor.dump_expr([0x90, 16]),
'DW_OP_regx: 16 (rip)')
self.assertEqual(self.visitor.dump_expr([0x9d, 0x8f, 0x0A, 0x90, 0x01]),
# Explaining the arguments is what the latest readelf does
'DW_OP_bit_piece: size: 1295 offset: 144')
self.assertEqual(self.visitor.dump_expr([0x0e, 0xff, 0x00, 0xff, 0x00, 0xff, 0x00, 0xff, 0x00]),
'DW_OP_const8u: 71777214294589695')
def test_basic_sequence(self):
self.assertEqual(self.visitor.dump_expr([0x03, 0x01, 0x02, 0, 0, 0x06, 0x06]),
'DW_OP_addr: 201; DW_OP_deref; DW_OP_deref')
self.assertEqual(self.visitor.dump_expr([0x15, 0xFF, 0x0b, 0xf1, 0xff]),
'DW_OP_pick: 255; DW_OP_const2s: -15')
self.assertEqual(self.visitor.dump_expr([0x1d, 0x1e, 0x1d, 0x1e, 0x1d, 0x1e]),
'DW_OP_mod; DW_OP_mul; DW_OP_mod; DW_OP_mul; DW_OP_mod; DW_OP_mul')
# 0xe0 maps to both DW_OP_GNU_push_tls_address and DW_OP_lo_user, so
# check for both to prevent non-determinism.
self.assertIn(self.visitor.dump_expr([0x08, 0x0f, 0xe0]),
('DW_OP_const1u: 15; DW_OP_GNU_push_tls_address',
'DW_OP_const1u: 15; DW_OP_lo_user'))
class TestParseExpr(unittest.TestCase):
structs32 = DWARFStructs(
little_endian=True,
dwarf_format=32,
address_size=4)
def setUp(self):
set_global_machine_arch('x64')
def test_single(self):
p = DWARFExprParser(self.structs32)
lst = p.parse_expr([0x1b])
self.assertEqual(lst, [DWARFExprOp(op=0x1B, op_name='DW_OP_div', args=[], offset=0)])
lst = p.parse_expr([0x90, 16])
self.assertEqual(lst, [DWARFExprOp(op=0x90, op_name='DW_OP_regx', args=[16], offset=0)])
lst = p.parse_expr([0xe0])
self.assertEqual(len(lst), 1)
# 0xe0 maps to both DW_OP_GNU_push_tls_address and DW_OP_lo_user, so
# check for both to prevent non-determinism.
self.assertIn(lst[0], [
DWARFExprOp(op=0xe0, op_name='DW_OP_GNU_push_tls_address', args=[], offset=0),
DWARFExprOp(op=0xe0, op_name='DW_OP_lo_user', args=[], offset=0)])
# Real life example:
# push_object_address
# deref
# dup
# bra 4
# lit0
# skip 3
# lit4
# minus
# deref
lst = p.parse_expr([0x97,0x6,0x12,0x28,0x4,0x0,0x30,0x2F,0x3,0x0,0x34,0x1C,0x6])
self.assertEqual(len(lst), 9)
self.assertEqual(lst, [
DWARFExprOp(op=0x97, op_name='DW_OP_push_object_address', args=[], offset=0),
DWARFExprOp(op=0x6, op_name='DW_OP_deref', args=[], offset=1),
DWARFExprOp(op=0x12, op_name='DW_OP_dup', args=[], offset=2),
DWARFExprOp(op=0x28, op_name='DW_OP_bra', args=[4], offset=3),
DWARFExprOp(op=0x30, op_name='DW_OP_lit0', args=[], offset=6),
DWARFExprOp(op=0x2f, op_name='DW_OP_skip', args=[3], offset=7),
DWARFExprOp(op=0x34, op_name='DW_OP_lit4', args=[], offset=10),
DWARFExprOp(op=0x1c, op_name='DW_OP_minus', args=[], offset=11),
DWARFExprOp(op=0x6, op_name='DW_OP_deref', args=[], offset=12)])
# This expression blob came from the test binary in issue 508,
# DT_TAG_variable at 0x2a48C, DW_AT_location
lst = p.parse_expr([0x5f, 0xf0])
self.assertEqual(len(lst), 2)
self.assertEqual(lst, [
DWARFExprOp(op=0x5f, op_name='DW_OP_reg15', args=[], offset=0),
DWARFExprOp(op=0xf0, op_name='DW_OP_GNU_uninit', args=[], offset=1)])
if __name__ == '__main__':
unittest.main()
|
