yuzu/unicorn
1
0
Fork 0
mirror of https://github.com/yuzu-emu/unicorn.git synced 2025-07-23 00:08:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #267 from practicalswift/hook-block-invalid-read

Browse source 
Add test case for issue #266 ("Invalid read of size 4" in cpu_tb_exec).
This commit is contained in:
Nguyen Anh Quynh 2015-11-16 02:17:04 +08:00
parent 2933d23772 8af4967707
commit 331154551e
3 changed files with 35 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
.gitignore vendored
View file

@ -111,6 +111,7 @@ eflags_nosync
00opcode_uc_crash 00opcode_uc_crash
eflags_noset eflags_noset
mem_map_large mem_map_large
invalid_read_in_cpu_tb_exec
################# #################

1
tests/regress/Makefile
View file

@ -16,6 +16,7 @@ TESTS += eflags_nosync
TESTS += 00opcode_uc_crash TESTS += 00opcode_uc_crash
TESTS += eflags_noset TESTS += eflags_noset
TESTS += mem_map_large TESTS += mem_map_large
TESTS += invalid_read_in_cpu_tb_exec
all: $(TESTS) all: $(TESTS)

33
tests/regress/invalid_read_in_cpu_tb_exec.c Normal file
View file

@ -0,0 +1,33 @@
#include <unicorn/unicorn.h>
static void hook_block(uc_engine *uc, uint64_t address, uint32_t size, void *user_data) {
printf("hook_block(…)\n");
}
/*
* Disassembly according to capstone:
* add byte ptr [rip - 1], 0x30
* jmp 0x1000000
*/
#define BINARY "\x80\x05\xff\xff\xff\xff\x30\xeb\xf7\x30"
#define MEMORY_SIZE 2 * 1024 * 1024
#define STARTING_ADDRESS 0x1000000
int main(int argc, char **argv, char **envp) {
uc_engine *uc;
if (uc_open(UC_ARCH_X86, UC_MODE_64, &uc)) {
printf("uc_open(…) failed\n");
return 1;
}
uc_mem_map(uc, STARTING_ADDRESS, MEMORY_SIZE, UC_PROT_ALL);
if (uc_mem_write(uc, STARTING_ADDRESS, BINARY, sizeof(BINARY) - 1)) {
printf("uc_mem_write(…) failed\n");
return 1;
}
uc_hook hook;
uc_hook_add(uc, &hook, UC_HOOK_BLOCK, hook_block, NULL, (uint64_t)1, (uint64_t)0);
printf("uc_emu_start(…)\n");
uc_emu_start(uc, STARTING_ADDRESS, STARTING_ADDRESS + sizeof(BINARY) - 1, 0, 0);
printf("done\n");
return 0;
}