2024-09-07 18:15:29 +06:00

138 lines
3.6 KiB
YAML

test_cases:
-
input:
bytes: [ 0x94, 0x09, 0x00, 0x00, 0x37, 0x13, 0x03, 0x00, 0x87, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x07, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x16, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ]
arch: "bpf"
options: [ CS_OPT_DETAIL, CS_MODE_BPF_CLASSIC ]
address: 0x0
expected:
insns:
-
asm_text: "mod 0x31337"
details:
groups: [ BPF_GRP_ALU ]
bpf:
operands:
-
type: BPF_OP_IMM
imm: 0x31337
regs_read: [ a ]
regs_write: [ a ]
-
asm_text: "txa"
details:
regs_read: [ x ]
groups: [ BPF_GRP_MISC ]
regs_write: [ a ]
-
asm_text: "tax"
details:
regs_read: [ a ]
groups: [ BPF_GRP_MISC ]
regs_write: [ x ]
-
asm_text: "ret a"
details:
groups: [ BPF_GRP_RETURN ]
bpf:
operands:
-
type: BPF_OP_REG
reg: a
regs_read: [ a ]
-
asm_text: "ld #len"
details:
groups: [ BPF_GRP_LOAD ]
bpf:
operands:
-
type: BPF_OP_EXT
ext: BPF_EXT_LEN
regs_write: [ a ]
-
input:
bytes: [ 0x97, 0x09, 0x00, 0x00, 0x37, 0x13, 0x03, 0x00, 0xdc, 0x02, 0x00, 0x00, 0x20, 0x00, 0x00, 0x00, 0x30, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xdb, 0x3a, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x84, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x6d, 0x33, 0x17, 0x02, 0x00, 0x00, 0x00, 0x00 ]
arch: "bpf"
options: [ CS_OPT_DETAIL, CS_MODE_BPF_EXTENDED ]
address: 0x0
expected:
insns:
-
asm_text: "mod64 r9, 0x31337"
details:
groups: [ BPF_GRP_ALU ]
bpf:
operands:
-
type: BPF_OP_REG
reg: r9
-
type: BPF_OP_IMM
imm: 0x31337
regs_read: [ r9 ]
regs_write: [ r9 ]
-
asm_text: "be32 r2"
details:
groups: [ BPF_GRP_ALU ]
bpf:
operands:
-
type: BPF_OP_REG
reg: r2
regs_read: [ r2 ]
regs_write: [ r2 ]
-
asm_text: "ldb [0x0]"
details:
groups: [ BPF_GRP_LOAD ]
bpf:
operands:
-
type: BPF_OP_MEM
mem_disp: 0x0
regs_write: [ r0 ]
-
asm_text: "xadddw [r10+0x100], r3"
details:
groups: [ BPF_GRP_STORE ]
bpf:
operands:
-
type: BPF_OP_MEM
mem_base: r10
mem_disp: 0x100
-
type: BPF_OP_REG
reg: r3
regs_read: [ r3, r10 ]
-
asm_text: "neg r2"
details:
groups: [ BPF_GRP_ALU ]
bpf:
operands:
-
type: BPF_OP_REG
reg: r2
regs_read: [ r2 ]
regs_write: [ r2 ]
-
asm_text: "jsgt r3, r3, +0x217"
details:
groups: [ BPF_GRP_JUMP ]
bpf:
operands:
-
type: BPF_OP_REG
reg: r3
-
type: BPF_OP_REG
reg: r3
-
type: BPF_OP_OFF
off: 0x217
regs_read: [ r3 ]