mirror of https://github.com/Cisco-Talos/clamav
git-svn: trunk@4091remotes/push_mirror/0.95
Tomasz Kojm
18 years ago
parent
f7677a216b
commit
ec285505da
@ -0,0 +1,129 @@ |
||||
/*
|
||||
* Copyright (C) 2008 Sourcefire, Inc. |
||||
* |
||||
* Authors: Tomasz Kojm |
||||
* |
||||
* This program is free software; you can redistribute it and/or modify |
||||
* it under the terms of the GNU General Public License version 2 as |
||||
* published by the Free Software Foundation. |
||||
* |
||||
* This program is distributed in the hope that it will be useful, |
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
* GNU General Public License for more details. |
||||
* |
||||
* You should have received a copy of the GNU General Public License |
||||
* along with this program; if not, write to the Free Software |
||||
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, |
||||
* MA 02110-1301, USA. |
||||
*/ |
||||
#if HAVE_CONFIG_H |
||||
#include "clamav-config.h" |
||||
#endif |
||||
|
||||
#ifdef HAVE_CHECK |
||||
|
||||
#include <check.h> |
||||
#include <stdio.h> |
||||
|
||||
#include "../libclamav/clamav.h" |
||||
#include "../libclamav/readdb.h" |
||||
#include "../libclamav/matcher.h" |
||||
#include "../libclamav/matcher-ac.h" |
||||
#include "../libclamav/matcher-bm.h" |
||||
#include "checks.h" |
||||
|
||||
static const struct ac_testdata_s { |
||||
const char *data; |
||||
const char *hexsig; |
||||
const char *virname; |
||||
} ac_testdata[] = { |
||||
/* IMPORTANT: ac_testdata[i].hexsig should only match ac_testdata[i].data */ |
||||
{ "daaaaaaaaddbbbbbcce", "64[4-4]61616161{2}6262[3-6]65", "Test_1" }, |
||||
{ "ebbbbbbbbeecccccddf", "6262(6162|6364|6265|6465){2}6363", "Test_2" }, |
||||
{ "aaaabbbbcccccdddddeeee", "616161*63636363*6565", "Test_3" }, |
||||
{ "oprstuwxy","6f??727374????7879", "Test_4" }, |
||||
{ "abdcabcddabccadbbdbacb", "6463{2-3}64646162(63|64|65)6361*6462????6261{-1}6362", "Test_5" }, |
||||
{ "abcdefghijkabcdefghijk", "62????65666768*696a6b6162{2-3}656667[1-3]6b", "Test_6" }, |
||||
{ "abcadbabcadbabcacb", "6?6164?26?62{3}?26162?361", "Test_7" }, |
||||
|
||||
{ NULL, NULL, NULL} |
||||
}; |
||||
|
||||
START_TEST (test_ac_scanbuff) { |
||||
struct cli_matcher *root; |
||||
struct cli_ac_data mdata; |
||||
const char *virname = NULL; |
||||
unsigned int i; |
||||
int ret; |
||||
|
||||
|
||||
root = (struct cli_matcher *) cli_calloc(1, sizeof(struct cli_matcher)); |
||||
fail_unless(root != NULL, "root == NULL"); |
||||
root->ac_only = 1; |
||||
|
||||
ret = cli_ac_init(root, AC_DEFAULT_MIN_DEPTH, AC_DEFAULT_MAX_DEPTH); |
||||
fail_unless(ret == CL_SUCCESS, "cli_ac_init() failed"); |
||||
|
||||
for(i = 0; ac_testdata[i].data; i++) { |
||||
ret = cli_parse_add(root, ac_testdata[i].virname, ac_testdata[i].hexsig, 0, 0, NULL, 0, NULL, 0); |
||||
fail_unless(ret == CL_SUCCESS, "cli_parse_add() failed"); |
||||
} |
||||
|
||||
ret = cli_ac_buildtrie(root); |
||||
fail_unless(ret == CL_SUCCESS, "cli_ac_buildtrie() failed"); |
||||
|
||||
ret = cli_ac_initdata(&mdata, root->ac_partsigs, 0, AC_DEFAULT_TRACKLEN); |
||||
fail_unless(ret == CL_SUCCESS, "cli_ac_initdata() failed"); |
||||
|
||||
for(i = 0; ac_testdata[i].data; i++) { |
||||
ret = cli_ac_scanbuff(ac_testdata[i].data, strlen(ac_testdata[i].data), &virname, NULL, NULL, root, &mdata, 0, 0, -1, NULL, AC_SCAN_VIR, NULL); |
||||
fail_unless(ret == CL_VIRUS, "cli_ac_scanbuff() failed for %s", ac_testdata[i].virname); |
||||
fail_unless(!strncmp(virname, ac_testdata[i].virname, strlen(ac_testdata[i].virname)), "Dataset %u matched with %s", i, virname); |
||||
} |
||||
|
||||
cli_ac_freedata(&mdata); |
||||
cli_ac_free(root); |
||||
free(root); |
||||
} |
||||
END_TEST |
||||
|
||||
START_TEST (test_bm_scanbuff) { |
||||
struct cli_matcher *root; |
||||
const char *virname = NULL; |
||||
int ret; |
||||
|
||||
|
||||
root = (struct cli_matcher *) cli_calloc(1, sizeof(struct cli_matcher)); |
||||
fail_unless(root != NULL, "root == NULL"); |
||||
|
||||
ret = cli_bm_init(root); |
||||
fail_unless(ret == CL_SUCCESS, "cli_bm_init() failed"); |
||||
|
||||
ret = cli_parse_add(root, "Sig1", "deadbabe", 0, 0, NULL, 0, NULL, 0); |
||||
fail_unless(ret == CL_SUCCESS, "cli_parse_add() failed"); |
||||
ret = cli_parse_add(root, "Sig2", "deadbeef", 0, 0, NULL, 0, NULL, 0); |
||||
fail_unless(ret == CL_SUCCESS, "cli_parse_add() failed"); |
||||
ret = cli_parse_add(root, "Sig3", "babedead", 0, 0, NULL, 0, NULL, 0); |
||||
fail_unless(ret == CL_SUCCESS, "cli_parse_add() failed"); |
||||
|
||||
ret = cli_bm_scanbuff("blah\xde\xad\xbe\xef", 12, &virname, root, 0, 0, -1); |
||||
fail_unless(ret == CL_VIRUS, "cli_bm_scanbuff() failed"); |
||||
fail_unless(!strncmp(virname, "Sig2", 4), "Incorrect signature matched in cli_bm_scanbuff()\n"); |
||||
cli_bm_free(root); |
||||
free(root); |
||||
} |
||||
END_TEST |
||||
|
||||
Suite *test_matchers_suite(void) |
||||
{ |
||||
Suite *s = suite_create("matchers"); |
||||
TCase *tc_matchers; |
||||
tc_matchers = tcase_create("matchers"); |
||||
suite_add_tcase(s, tc_matchers); |
||||
tcase_add_test(tc_matchers, test_ac_scanbuff); |
||||
tcase_add_test(tc_matchers, test_bm_scanbuff); |
||||
return s; |
||||
} |
||||
|
||||
#endif |
||||
Loading…
Reference in new issue