1 files changed, 110 insertions, 0 deletions
diff --git a/test/arch/x86/qemu/testqemu.py b/test/arch/x86/qemu/testqemu.py
new file mode 100644
index 00000000..d04308e4
--- /dev/null
+++ b/test/arch/x86/qemu/testqemu.py
@@ -0,0 +1,110 @@
+import os
+import sys
+import struct
+import logging
+from pdb import pm
+
+from miasm2.analysis.sandbox import Sandbox_Linux_x86_32
+from miasm2.jitter.jitload import log_func
+from miasm2.os_dep.win_api_x86_32 import get_str_ansi, upck32
+
+# Utils
+def parse_fmt(s):
+    fmt = s[:]+"\x00"
+    out = []
+    i = 0
+    while i < len(fmt):
+        c = fmt[i]
+        if c != "%":
+            i+=1
+            continue
+        if fmt[i+1] == "%":
+            i+=2
+            continue
+        j = 0
+        i+=1
+        while fmt[i+j] in "0123456789$.-":
+            j+=1
+        if fmt[i+j] in ['l']:
+            j +=1
+        if fmt[i+j] == "h":
+            x = fmt[i+j:i+j+2]
+        else:
+            x = fmt[i+j]
+        i+=j
+        out.append(x)
+    return out
+
+nb_tests = 1
+def xxx___printf_chk(jitter):
+    """Tiny implementation of printf_chk"""
+    global nb_tests
+    ret_ad, args = jitter.func_args_cdecl(["out", "format"])
+    if args.out != 1:
+        raise RuntimeError("Not implemented")
+    fmt = get_str_ansi(jitter, args.format)
+    # Manage llx
+    fmt = fmt.replace("llx", "lx")
+
+    fmt_a = parse_fmt(fmt)
+    esp = jitter.cpu.ESP
+    args = []
+    i = 0
+
+    for x in fmt_a:
+        a = upck32(jitter.vm.get_mem(esp + 8 + 4*i, 4))
+        if x == "s":
+            a = get_str_ansi(jitter, a)
+        elif x.lower() in ("x", 'd'):
+            pass
+        elif x.lower() in ("f", "l"):
+            a2 = upck32(jitter.vm.get_mem(esp + 8 + 4*(i+1), 4))
+            a = struct.unpack("d", struct.pack("Q", a2 << 32 | a))[0]
+            i += 1
+        else:
+            raise RuntimeError("Not implemented format")
+        args.append(a)
+        i += 1
+
+    output = fmt%(tuple(args))
+    # NaN bad repr in Python
+    output = output.replace("nan", "-nan")
+
+    if "\n" not in output:
+        raise RuntimeError("Format must end with a \\n")
+
+    # Check with expected result
+    line = expected.next()
+    if output != line:
+        print "Expected:", line
+        print "Obtained:", output
+        raise RuntimeError("Bad semantic")
+
+    sys.stdout.write("[%d] %s" % (nb_tests, output))
+    nb_tests += 1
+    jitter.func_ret_cdecl(ret_ad, 0)
+
+
+# Parse arguments
+parser = Sandbox_Linux_x86_32.parser(description="ELF sandboxer")
+parser.add_argument("filename", help="ELF Filename")
+parser.add_argument("funcname", help="Targeted function's name")
+parser.add_argument("expected", help="Expected output")
+options = parser.parse_args()
+
+# Expected output
+expected = open(options.expected)
+
+# Create sandbox
+sb = Sandbox_Linux_x86_32(options.filename, options, globals())
+try:
+    addr = sb.elf.getsectionbyname(".symtab").symbols[options.funcname].value
+except AttributeError:
+    raise RuntimeError("The target binary must have a symtab section")
+
+log_func.setLevel(logging.ERROR)
+
+# Run
+sb.run(addr)
+
+assert(sb.jitter.run is False)