| """ |
| Use lldb Python API to disassemble raw machine code bytes |
| """ |
| |
| from __future__ import print_function |
| |
| |
| import re |
| import lldb |
| from lldbsuite.test.decorators import * |
| from lldbsuite.test.lldbtest import * |
| from lldbsuite.test import lldbutil |
| |
| |
| class DisassembleRawDataTestCase(TestBase): |
| |
| mydir = TestBase.compute_mydir(__file__) |
| |
| @add_test_categories(['pyapi']) |
| @no_debug_info_test |
| @skipIfRemote |
| @skipIfReproducer # GetInstructions is not instrumented. |
| def test_disassemble_raw_data(self): |
| """Test disassembling raw bytes with the API.""" |
| # Create a target from the debugger. |
| arch = self.getArchitecture() |
| if re.match("mips*el", arch): |
| target = self.dbg.CreateTargetWithFileAndTargetTriple("", "mipsel") |
| raw_bytes = bytearray([0x21, 0xf0, 0xa0, 0x03]) |
| elif re.match("mips", arch): |
| target = self.dbg.CreateTargetWithFileAndTargetTriple("", "mips") |
| raw_bytes = bytearray([0x03, 0xa0, 0xf0, 0x21]) |
| elif re.match("powerpc64le", arch): |
| target = self.dbg.CreateTargetWithFileAndTargetTriple("", "powerpc64le") |
| raw_bytes = bytearray([0x00, 0x00, 0x80, 0x38]) |
| else: |
| target = self.dbg.CreateTargetWithFileAndTargetTriple("", "x86_64") |
| raw_bytes = bytearray([0x48, 0x89, 0xe5]) |
| |
| self.assertTrue(target, VALID_TARGET) |
| insts = target.GetInstructions(lldb.SBAddress(0, target), raw_bytes) |
| |
| inst = insts.GetInstructionAtIndex(0) |
| |
| if self.TraceOn(): |
| print() |
| print("Raw bytes: ", [hex(x) for x in raw_bytes]) |
| print("Disassembled%s" % str(inst)) |
| if re.match("mips", arch): |
| self.assertEqual(inst.GetMnemonic(target), "move") |
| self.assertEqual(inst.GetOperands(target), |
| '$' + "fp, " + '$' + "sp") |
| elif re.match("powerpc64le", arch): |
| self.assertEqual(inst.GetMnemonic(target), "li") |
| self.assertEqual(inst.GetOperands(target), "4, 0") |
| else: |
| self.assertEqual(inst.GetMnemonic(target), "movq") |
| self.assertEqual(inst.GetOperands(target), |
| '%' + "rsp, " + '%' + "rbp") |
