test_winkernel.cpp File Reference

#include <ntddk.h>
#include <capstone/platform.h>
#include <capstone/capstone.h>
#include "../utils.h"
#include "test_basic.c"
#include "test_detail.c"
#include "test_skipdata.c"
#include "test_iter.c"
#include "test_customized_mnem.c"
#include "test_arm.c"
#include "test_arm64.c"
#include "test_mips.c"
#include "test_m68k.c"
#include "test_ppc.c"
#include "test_sparc.c"
#include "test_systemz.c"
#include "test_x86.c"
#include "test_xcore.c"

Go to the source code of this file.

Namespaces
	basic
	detail
	skipdata
	iter
	customized_mnem_
	arm
	arm64
	mips
	m68k
	ppc
	sparc
	systemz
	x86
	xcore

Functions
static void	test ()
static void	cs_winkernel_vsnprintf_test ()
EXTERN_C NTSTATUS	DriverEntry (PDRIVER_OBJECT DriverObject, PUNICODE_STRING RegistryPath)
_Use_decl_annotations_ int __cdecl	printf (const char *const format,...)

Variables
EXTERN_C DRIVER_INITIALIZE	DriverEntry

Function Documentation

cs_winkernel_vsnprintf_test()

static void cs_winkernel_vsnprintf_test ( )

static

Definition at line 135 of file test_winkernel.cpp.

{
    char buf[10];
    bool ok = true;
    ok = (ok && cs_snprintf(buf, sizeof(buf), "%s", "") == 0 && strcmp(buf, "") == 0);
    ok = (ok && cs_snprintf(buf, sizeof(buf), "%s", "0") == 1 && strcmp(buf, "0") == 0);
    ok = (ok && cs_snprintf(buf, sizeof(buf), "%s", "012345678") == 9 && strcmp(buf, "012345678") == 0);
    ok = (ok && cs_snprintf(buf, sizeof(buf), "%s", "0123456789") == 10 && strcmp(buf, "012345678") == 0);
    ok = (ok && cs_snprintf(buf, sizeof(buf), "%s", "01234567890") == 11 && strcmp(buf, "012345678") == 0);
    ok = (ok && cs_snprintf(buf, sizeof(buf), "%s", "0123456789001234567890") == 22 && strcmp(buf, "012345678") == 0);
    if (!ok) {
        printf("ERROR: cs_winkernel_vsnprintf_test() did not produce expected results!\n");
    }
}

References cs_snprintf(), ok, and printf().

Referenced by DriverEntry().

DriverEntry()

EXTERN_C NTSTATUS DriverEntry	(	PDRIVER_OBJECT	DriverObject,
		PUNICODE_STRING	RegistryPath
	)

Definition at line 151 of file test_winkernel.cpp.

{
    UNREFERENCED_PARAMETER(DriverObject);
    UNREFERENCED_PARAMETER(RegistryPath);
    cs_winkernel_vsnprintf_test();
    test();
    return STATUS_CANCELLED;
}

References cs_winkernel_vsnprintf_test(), STATUS_CANCELLED, and test().

printf()

_Use_decl_annotations_ int __cdecl printf	(	const char *const	format,
			...
	)

Definition at line 163 of file test_winkernel.cpp.

{
    NTSTATUS status;
    va_list args;
 
    va_start(args, format);
    status = vDbgPrintEx(DPFLTR_DEFAULT_ID, DPFLTR_ERROR_LEVEL, format, args);
    va_end(args);
    return NT_SUCCESS(status);
}

References args, NT_SUCCESS, and status.

Referenced by cs_winkernel_vsnprintf_test(), and test().

test()

static void test ( )

static

Definition at line 94 of file test_winkernel.cpp.

{
    KFLOATING_SAVE float_save;
    NTSTATUS status;
 
    // Any of Capstone APIs cannot be called at IRQL higher than DISPATCH_LEVEL
    // since our malloc implementation using ExAllocatePoolWithTag() is able to
    // allocate memory only up to the DISPATCH_LEVEL level.
    NT_ASSERT(KeGetCurrentIrql() <= DISPATCH_LEVEL);
 
    // On a 32bit driver, KeSaveFloatingPointState() is required before using any
    // Capstone function because Capstone can access to the MMX/x87 registers and
    // 32bit Windows requires drivers to use KeSaveFloatingPointState() before and
    // KeRestoreFloatingPointState() after accessing them. See "Using Floating
    // Point or MMX in a WDM Driver" on MSDN for more details.
    status = KeSaveFloatingPointState(&float_save);
    if (!NT_SUCCESS(status)) {
        printf("ERROR: Failed to save floating point state!\n");
        return;
    }
 
    basic::test();
    detail::test();
    skipdata::test();
    iter::test();
    customized_mnem_::test();
    arm::test();
    arm64::test();
    mips::test();
    m68k::test();
    ppc::test();
    sparc::test();
    systemz::test();
    x86::test();
    xcore::test();
 
    // Restores the nonvolatile floating-point context.
    KeRestoreFloatingPointState(&float_save);
}

References KeGetCurrentIrql, KeRestoreFloatingPointState, KeSaveFloatingPointState, NT_SUCCESS, printf(), and status.

Referenced by DriverEntry().

Variable Documentation

DriverEntry

EXTERN_C DRIVER_INITIALIZE DriverEntry

Definition at line 19 of file test_winkernel.cpp.