test/jitter/jmp_out_mem.py


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

import sys
from miasm.core.utils import decode_hex
from miasm.jitter.csts import PAGE_READ, PAGE_WRITE, EXCEPT_ACCESS_VIOL
from miasm.analysis.machine import Machine
from miasm.core.locationdb import LocationDB


def code_sentinelle(jitter):
    jitter.running = False
    jitter.pc = 0
    return True


machine = Machine("x86_32")
loc_db = LocationDB()
jitter = machine.jitter(loc_db, sys.argv[1])

jitter.init_stack()

# nop
# mov eax, 0x42
# jmp 0x20

data = decode_hex("90b842000000eb20")

# Will raise memory error at 0x40000028

error_raised = False
def raise_me(jitter):
    global error_raised
    error_raised = True
    assert jitter.pc == 0x40000028
    return False

jitter.add_exception_handler(EXCEPT_ACCESS_VIOL, raise_me)


run_addr = 0x40000000

jitter.vm.add_memory_page(run_addr, PAGE_READ | PAGE_WRITE, data)

jitter.set_trace_log()
jitter.push_uint32_t(0x1337beef)

jitter.add_breakpoint(0x1337beef, code_sentinelle)

jitter.init_run(run_addr)
jitter.continue_run()

assert error_raised is True