angr 9.2.87__py3-none-manylinux2014_x86_64.whl → 9.2.89__py3-none-manylinux2014_x86_64.whl

tests/analyses/decompiler/test_peephole_optimizations.py

@@ -1,48 +0,0 @@
-#!/usr/bin/env python3
-# pylint:disable=missing-class-docstring,no-self-use
-__package__ = __package__ or "tests.analyses.decompiler"  # pylint:disable=redefined-builtin
-
-import os
-
-import unittest
-import archinfo
-import ailment
-import angr
-from angr.analyses.decompiler.peephole_optimizations import ConstantDereferences
-
-from ...common import bin_location
-
-
-test_location = os.path.join(bin_location, "tests")
-
-
-class TestPeepholeOptimizations(unittest.TestCase):
-    def test_constant_dereference(self):
-        # a = *(A) :=> a = the variable at at A iff
-        # - A is a pointer that points to a read-only section.
-
-        proj = angr.Project(os.path.join(test_location, "armel", "decompiler", "rm"), auto_load_libs=False)
-
-        expr = ailment.Expr.Load(
-            None,
-            ailment.Expr.Const(None, None, 0xA000, proj.arch.bits),
-            proj.arch.bytes,
-            archinfo.Endness.LE,
-            ins_addr=0x400100,
-        )
-        opt = ConstantDereferences(proj, proj.kb, 0)
-        optimized = opt.optimize(expr)
-        assert isinstance(optimized, ailment.Const)
-        assert optimized.value == 0x183F8
-        assert optimized.tags.get("ins_addr", None) == 0x400100, "Peephole optimizer lost tags."
-
-        # multiple cases that no optimization should happen
-        # a. Loading a pointer from a writable location
-        expr = ailment.Expr.Load(None, ailment.Expr.Const(None, None, 0x21DF4, proj.arch.bits), 1, archinfo.Endness.LE)
-        opt = ConstantDereferences(proj, proj.kb, 0)
-        optimized = opt.optimize(expr)
-        assert optimized is None
-
-
-if __name__ == "__main__":
-    unittest.main()

tests/analyses/decompiler/test_propagator_loops.py

@@ -1,101 +0,0 @@
-#!/usr/bin/env python3
-# pylint:disable=missing-class-docstring
-import re
-import unittest
-
-import ailment
-import angr
-from angr.analyses.decompiler.condition_processor import ConditionProcessor
-from angr.analyses.decompiler.structuring.structurer_nodes import LoopNode
-
-
-class TestPropagatorLoops(unittest.TestCase):
-    @staticmethod
-    def _test_loop_variant_common(code):
-        def banner(s):
-            print(s + "\n" + "=" * 40)
-
-        banner("Input Assembly")
-        print("\n".join(l.strip() for l in code.splitlines()))
-        print("")
-        p = angr.load_shellcode(code, "AMD64")
-        p.analyses.CFGFast(normalize=True)
-        f = p.kb.functions[0]
-        banner("Raw AIL Nodes")
-        nodes = sorted(list(f.nodes), key=lambda n: n.addr)
-        am = ailment.Manager(arch=p.arch)
-        for n in nodes:
-            b = p.factory.block(n.addr, n.size)
-            ab = ailment.IRSBConverter.convert(b.vex, am)
-            print(ab)
-        print("")
-        banner("Optimized AIL Nodes")
-        a = p.analyses.Clinic(f)
-        nodes = sorted(list(a.graph.nodes), key=lambda n: n.addr)
-        assert len(nodes) == 3
-        for n in nodes:
-            print(n)
-        print("")
-        banner("Decompilation")
-        d = p.analyses.Decompiler(f)
-        print(d.codegen.text)
-        print("")
-        # cond_node = nodes[1]
-        # cond_stmt = None
-        # for stmt in cond_node.statements:
-        #   if type(stmt) is ailment.statement.ConditionalJump:
-        #       cond_stmt = stmt
-        #       break
-        # assert(cond_stmt is not None)
-        # print('Condition:' + str(cond_stmt))
-        # print(cond_proc.claripy_ast_from_ail_condition(cond_stmt.condition))
-        cond_proc = ConditionProcessor(p.arch)
-        ri = p.analyses.RegionIdentifier(f, graph=a.graph, cond_proc=cond_proc, kb=p.kb)
-        rs = p.analyses.RecursiveStructurer(ri.region, cond_proc=cond_proc, kb=p.kb, func=f)
-        snodes = rs.result.nodes
-        assert len(snodes) == 3
-        assert isinstance(snodes[1], LoopNode)
-        banner("Condition")
-        print(str(snodes[1].condition))
-        return snodes[1].condition
-
-    def test_loop_counter_reg(self):
-        cond = self._test_loop_variant_common(
-            """
-            push rbp
-            push rbx
-            mov ebx, 0xa
-            loop:
-            nop
-            dec ebx
-            jnz loop
-            pop rbx
-            pop rbp
-            ret"""
-        )
-        # TODO: we should only get ir_X != 0 once we implement value numbering
-        assert (
-            re.match(r"\(ir_\d+ != 0x0<32>\)", str(cond)) is not None
-            or re.match(r"\(cc_dep1<4> != 0x0<32>\)", str(cond)) is not None
-        )
-
-    def test_loop_counter_stack(self):
-        cond = self._test_loop_variant_common(
-            """
-            push rbp
-            mov rbp, rsp
-            sub rsp, 8
-            mov dword ptr [rsp], 0
-            loop:
-            nop
-            add dword ptr [rsp], 1
-            cmp dword ptr [rsp], 9
-            jle loop
-            leave
-            ret"""
-        )
-        assert re.match(r"\(Load\(addr=stack_base-16, size=4, endness=Iend_LE\) <=s 0x9<32>\)", str(cond)) is not None
-
-
-if __name__ == "__main__":
-    unittest.main()

tests/analyses/decompiler/test_structurer.py

@@ -1,275 +0,0 @@
-#!/usr/bin/env python3
-# pylint: disable=missing-class-docstring,no-self-use,line-too-long
-__package__ = __package__ or "tests.analyses.decompiler"  # pylint:disable=redefined-builtin
-
-import os
-import unittest
-
-import networkx
-
-import angr
-import angr.analyses.decompiler
-from angr.analyses.decompiler.structuring import DreamStructurer
-
-from ...common import bin_location
-
-
-test_location = os.path.join(bin_location, "tests")
-
-
-class DummyNode:
-    def __init__(self, n):
-        self.n = n
-
-    def __hash__(self):
-        return hash(self.n)
-
-    def __eq__(self, other):
-        return isinstance(other, DummyNode) and self.n == other.n or isinstance(other, int) and self.n == other
-
-    @property
-    def addr(self):
-        return self.n
-
-    def __repr__(self):
-        return "<Node %d>" % self.n
-
-
-def d(n):
-    return DummyNode(n)
-
-
-def D(*edge):
-    return DummyNode(edge[0]), DummyNode(edge[1])
-
-
-class TestStructurer(unittest.TestCase):
-    def test_region_identifier_0(self):
-        g = networkx.DiGraph()
-
-        #
-        #       1
-        #       |
-        #       2
-        #      / \
-        #     3  4
-        #     \  /
-        #      5
-        #      |
-        #      6
-
-        g.add_edges_from(
-            [
-                D(1, 2),
-                D(2, 3),
-                D(2, 4),
-                D(3, 5),
-                D(4, 5),
-                D(5, 6),
-            ]
-        )
-
-        ri = angr.analyses.decompiler.RegionIdentifier(None, graph=g)
-        region = ri.region
-        assert len(region.graph.nodes()) == 2
-
-    def test_region_identifier_1(self):
-        g = networkx.DiGraph()
-
-        #
-        #        1
-        #        |
-        #        2
-        #        | \
-        #        | 3
-        #        | /
-        #        4
-        #        |
-        #        5
-        #        | \
-        #        | 6
-        #        | /
-        #        7
-        #        |
-        #        8
-
-        g.add_edges_from(
-            [
-                D(1, 2),
-                D(2, 3),
-                D(3, 4),
-                D(2, 4),
-                D(4, 5),
-                D(5, 6),
-                D(6, 7),
-                D(5, 7),
-                D(7, 8),
-            ]
-        )
-
-        ri = angr.analyses.decompiler.RegionIdentifier(None, graph=g)
-        region = ri.region
-        assert len(region.graph.nodes()) == 2
-
-    def test_smoketest(self):
-        p = angr.Project(os.path.join(test_location, "x86_64", "all"), auto_load_libs=False, load_debug_info=True)
-        cfg = p.analyses.CFG(data_references=True, normalize=True)
-
-        main_func = cfg.kb.functions["main"]
-
-        # convert function blocks to AIL blocks
-        clinic = p.analyses.Clinic(main_func)
-
-        # recover regions
-        ri = p.analyses.RegionIdentifier(main_func, graph=clinic.graph)
-
-        # structure it
-        st = p.analyses[DreamStructurer].prep()(ri.region)
-
-        # simplify it
-        _ = p.analyses.RegionSimplifier(main_func, st.result)
-
-    def test_smoketest_cm3_firmware(self):
-        p = angr.Project(
-            os.path.join(test_location, "armel", "i2c_master_read-nucleol152re.elf"),
-            auto_load_libs=False,
-            load_debug_info=True,
-        )
-        cfg = p.analyses.CFG(normalize=True, force_complete_scan=False)
-
-        main_func = cfg.kb.functions["main"]
-
-        # convert function blocks to AIL blocks
-        clinic = p.analyses.Clinic(main_func)
-
-        # recover regions
-        ri = p.analyses.RegionIdentifier(main_func, graph=clinic.graph)
-
-        # structure it
-        p.analyses[DreamStructurer].prep()(ri.region)
-
-    def test_simple(self):
-        p = angr.Project(os.path.join(test_location, "x86_64", "all"), auto_load_libs=False, load_debug_info=True)
-        cfg = p.analyses.CFG(data_references=True, normalize=True)
-
-        main_func = cfg.kb.functions["main"]
-
-        # convert function blocks to AIL blocks
-        clinic = p.analyses.Clinic(main_func)
-
-        # recover regions
-        ri = p.analyses.RegionIdentifier(main_func, graph=clinic.graph)
-
-        # structure it
-        rs = p.analyses.RecursiveStructurer(ri.region)
-
-        # simplify it
-        s = p.analyses.RegionSimplifier(main_func, rs.result)
-
-        codegen = p.analyses.StructuredCodeGenerator(main_func, s.result, cfg=cfg, ail_graph=clinic.graph)
-        print(codegen.text)
-
-    def test_simple_loop(self):
-        p = angr.Project(
-            os.path.join(test_location, "x86_64", "cfg_loop_unrolling"), auto_load_libs=False, load_debug_info=True
-        )
-        cfg = p.analyses.CFG(data_references=True, normalize=True)
-
-        test_func = cfg.kb.functions["test_func"]
-
-        # convert function blocks to AIL blocks
-        clinic = p.analyses.Clinic(test_func)
-
-        # recover regions
-        ri = p.analyses.RegionIdentifier(test_func, graph=clinic.graph)
-
-        # structure it
-        rs = p.analyses.RecursiveStructurer(ri.region)
-
-        # simplify it
-        s = p.analyses.RegionSimplifier(test_func, rs.result)
-
-        codegen = p.analyses.StructuredCodeGenerator(test_func, s.result, cfg=cfg, ail_graph=clinic.graph)
-        print(codegen.text)
-
-        assert len(codegen.map_pos_to_node._posmap) > 1
-        assert len(codegen.map_ast_to_pos) > 1
-
-    def test_recursive_structuring(self):
-        p = angr.Project(
-            os.path.join(test_location, "x86_64", "cfg_loop_unrolling"), auto_load_libs=False, load_debug_info=True
-        )
-        cfg = p.analyses.CFG(data_references=True, normalize=True)
-
-        test_func = cfg.kb.functions["test_func"]
-
-        # convert function blocks to AIL blocks
-        clinic = p.analyses.Clinic(test_func)
-
-        # recover regions
-        ri = p.analyses.RegionIdentifier(test_func, graph=clinic.graph)
-
-        # structure it
-        rs = p.analyses.RecursiveStructurer(ri.region)
-
-        # simplify it
-        s = p.analyses.RegionSimplifier(test_func, rs.result)
-
-        codegen = p.analyses.StructuredCodeGenerator(test_func, s.result, cfg=cfg, ail_graph=clinic.graph)
-        print(codegen.text)
-
-    def test_while_true_break(self):
-        p = angr.Project(
-            os.path.join(test_location, "x86_64", "test_decompiler_loops_O0"),
-            auto_load_libs=False,
-            load_debug_info=True,
-        )
-        cfg = p.analyses.CFG(data_references=True, normalize=True)
-
-        test_func = cfg.kb.functions["_while_true_break"]
-
-        # convert function blocks to AIL blocks
-        clinic = p.analyses.Clinic(test_func)
-
-        # recover regions
-        ri = p.analyses.RegionIdentifier(test_func, graph=clinic.graph)
-
-        # structure it
-        rs = p.analyses.RecursiveStructurer(ri.region)
-
-        # simplify it
-        s = p.analyses.RegionSimplifier(test_func, rs.result)
-
-        codegen = p.analyses.StructuredCodeGenerator(test_func, s.result, cfg=cfg, ail_graph=clinic.graph)
-
-        print(codegen.text)
-
-    def test_while(self):
-        p = angr.Project(
-            os.path.join(test_location, "x86_64", "test_decompiler_loops_O0"),
-            auto_load_libs=False,
-            load_debug_info=True,
-        )
-        cfg = p.analyses.CFG(data_references=True, normalize=True)
-
-        test_func = cfg.kb.functions["_while"]
-
-        # convert function blocks to AIL blocks
-        clinic = p.analyses.Clinic(test_func)
-
-        # recover regions
-        ri = p.analyses.RegionIdentifier(test_func, graph=clinic.graph)
-
-        # structure it
-        rs = p.analyses.RecursiveStructurer(ri.region)
-
-        # simplify it
-        s = p.analyses.RegionSimplifier(test_func, rs.result)
-
-        codegen = p.analyses.StructuredCodeGenerator(test_func, s.result, cfg=cfg, ail_graph=clinic.graph)
-
-        print(codegen.text)
-
-
-if __name__ == "__main__":
-    unittest.main()