mirror of
https://github.com/mandiant/capa.git
synced 2025-12-15 09:00:45 -08:00
51 lines
2.0 KiB
Python
51 lines
2.0 KiB
Python
# Copyright (C) 2020 Mandiant, Inc. All Rights Reserved.
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at: [package root]/LICENSE.txt
|
|
# Unless required by applicable law or agreed to in writing, software distributed under the License
|
|
# is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and limitations under the License.
|
|
|
|
import pytest
|
|
import fixtures
|
|
from fixtures import (
|
|
FEATURE_PRESENCE_TESTS_DOTNET,
|
|
scope,
|
|
sample,
|
|
b9f5b_dotnetfile_extractor,
|
|
mixed_mode_64_dotnetfile_extractor,
|
|
)
|
|
|
|
import capa.features.file
|
|
|
|
|
|
@fixtures.parametrize(
|
|
"sample,scope,feature,expected",
|
|
FEATURE_PRESENCE_TESTS_DOTNET,
|
|
indirect=["sample", "scope"],
|
|
)
|
|
def test_dotnetfile_features(sample, scope, feature, expected):
|
|
if scope.__name__ != "file":
|
|
pytest.xfail("dotnetfile only extracts file scope features")
|
|
|
|
if isinstance(feature, capa.features.file.FunctionName):
|
|
pytest.xfail("dotnetfile doesn't extract function names")
|
|
|
|
fixtures.do_test_feature_presence(fixtures.get_dotnetfile_extractor, sample, scope, feature, expected)
|
|
|
|
|
|
@fixtures.parametrize(
|
|
"extractor,function,expected",
|
|
[
|
|
("b9f5b_dotnetfile_extractor", "is_dotnet_file", True),
|
|
("b9f5b_dotnetfile_extractor", "is_mixed_mode", False),
|
|
("mixed_mode_64_dotnetfile_extractor", "is_mixed_mode", True),
|
|
("b9f5b_dotnetfile_extractor", "get_entry_point", 0x6000007),
|
|
("b9f5b_dotnetfile_extractor", "get_runtime_version", (2, 5)),
|
|
("b9f5b_dotnetfile_extractor", "get_meta_version_string", "v2.0.50727"),
|
|
],
|
|
)
|
|
def test_dotnetfile_extractor(request, extractor, function, expected):
|
|
extractor_function = getattr(request.getfixturevalue(extractor), function)
|
|
assert extractor_function() == expected
|