gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2026-07-11 22:51:52 -07:00
Code Issues Packages Projects Releases Wiki Activity

tests: fix function address

Browse Source
This commit is contained in:
William Ballenthin
2020-08-03 19:10:05 -06:00
parent c3b848183d
commit f02412bcc5
1 changed files with 2 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test_viv_features.py
+2 -10
View File
@@ -86,11 +86,7 @@ def test_string_features(mimikatz):
def test_string_pointer_features(mimikatz):
# viv doesn't identify this function, because its only referenced by vtable
# but thats not the point of this test
mimikatz.vw.makeFunction(0x44EE5A)
features = extract_function_features(viv_utils.Function(mimikatz.vw, 0x44EE5A))
features = extract_function_features(viv_utils.Function(mimikatz.vw, 0x44EDEF))
assert capa.features.String("INPUTEVENT") in features
@@ -109,11 +105,7 @@ def test_byte_features64(sample_lab21_01):
def test_bytes_pointer_features(mimikatz):
# viv doesn't identify this function, because its only referenced by vtable
# but thats not the point of this test
mimikatz.vw.makeFunction(0x44EE5A)
features = extract_function_features(viv_utils.Function(mimikatz.vw, 0x44EE5A))
features = extract_function_features(viv_utils.Function(mimikatz.vw, 0x44EDEF))
assert capa.features.Bytes("INPUTEVENT".encode("utf-16le")).evaluate(features) == True