mirrors/unicorn
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Crash case: Invalid read of size 4 when tracing (MIPS32). See #282

Browse Source
This commit is contained in:
practicalswift 2015-11-30 23:44:49 +01:00
parent d4214150c2
commit 7a1067ad4a
3 changed files with 35 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.gitignore vendored
View File

@ -114,6 +114,7 @@ mem_map_large
invalid_read_in_cpu_tb_exec
invalid_write_in_cpu_tb_exec_x86_64
x86_16_segfault
mips_invalid_read_of_size_4_when_tracing
#################

1
tests/regress/Makefile
View File

@ -19,6 +19,7 @@ TESTS += mem_map_large
TESTS += invalid_read_in_cpu_tb_exec
TESTS += invalid_write_in_cpu_tb_exec_x86_64
TESTS += x86_16_segfault
TESTS += mips_invalid_read_of_size_4_when_tracing
all: $(TESTS)

33
tests/regress/mips_invalid_read_of_size_4_when_tracing.c Normal file
View File

@ -0,0 +1,33 @@
#include <unicorn/unicorn.h>
static void hook_code(uc_engine *uc, uint64_t address, uint32_t size, void *user_data) {
printf("tracing\n");
}
#define HARDWARE_ARCHITECTURE UC_ARCH_MIPS
#define HARDWARE_MODE UC_MODE_MIPS32
#define MEMORY_STARTING_ADDRESS 0x1000000
#define MEMORY_SIZE 2 * 1024 * 1024
#define MEMORY_PERMISSIONS UC_PROT_ALL
#define BINARY_CODE "00000000000000000000000000AA"
int main(int argc, char **argv, char **envp) {
uc_engine *uc;
if (uc_open(HARDWARE_ARCHITECTURE, HARDWARE_MODE, &uc)) {
printf("uc_open(…) failed\n");
return 1;
}
uc_mem_map(uc, MEMORY_STARTING_ADDRESS, MEMORY_SIZE, MEMORY_PERMISSIONS);
if (uc_mem_write(uc, MEMORY_STARTING_ADDRESS, BINARY_CODE, sizeof(BINARY_CODE) - 1)) {
printf("uc_mem_write(…) failed\n");
return 1;
}
uc_hook trace;
uc_hook_add(uc, &trace, UC_HOOK_CODE, hook_code, NULL, (uint64_t)MEMORY_STARTING_ADDRESS, (uint64_t)(MEMORY_STARTING_ADDRESS + 1));
printf("uc_emu_start(…)\n");
uc_emu_start(uc, MEMORY_STARTING_ADDRESS, MEMORY_STARTING_ADDRESS + sizeof(BINARY_CODE) - 1, 0, 0);
printf("done\n");
return 0;
}