gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2025-12-21 14:50:33 -08:00
Code Issues Packages Projects Releases Wiki Activity

main: load gzip compressed .pat files

Browse Source
This commit is contained in:
William Ballenthin
2021-03-04 18:04:46 -07:00
parent 20894124e6
commit 004ddb3e66
4 changed files with 16 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
tests/test_function_id.py
View File

@@ -10,6 +10,12 @@ def test_function_id_simple_match(pma16_01_extractor):
assert pma16_01_extractor.get_function_name(0x407490) == "__aulldiv"
def test_function_id_gz_pat(pma16_01_extractor):
# aullrem is stored in `test_aullrem.pat.gz`
assert pma16_01_extractor.is_library_function(0x407500) == True
assert pma16_01_extractor.get_function_name(0x407500) == "__aullrem"
@pytest.mark.xfail
def test_function_id_complex_match(pma16_01_extractor):
# 0x405714 is __spawnlp which requires recursive match of __spawnvp at 0x407FAB