Subversion Repositories ao486

/*
 * Copyright (c) 2014, Aleksander Osman
 * All rights reserved.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are met:
 * 
 * * Redistributions of source code must retain the above copyright notice, this
 *   list of conditions and the following disclaimer.
 * 
 * * Redistributions in binary form must reproduce the above copyright notice,
 *   this list of conditions and the following disclaimer in the documentation
 *   and/or other materials provided with the distribution.
 * 
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
 * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */
 
package ao486.test.segment;
 
import ao486.test.TestUnit;
import static ao486.test.TestUnit.run_test;
import ao486.test.layers.DescriptorTableLayer;
import ao486.test.layers.FlagsLayer;
import ao486.test.layers.GeneralRegisterLayer;
import ao486.test.layers.HandleModeChangeLayer;
import ao486.test.layers.IOLayer;
import ao486.test.layers.InstructionLayer;
import ao486.test.layers.MemoryLayer;
import ao486.test.layers.OtherLayer;
import ao486.test.layers.Pair;
import ao486.test.layers.SegmentLayer;
import ao486.test.layers.StackLayer;
import java.io.Serializable;
import java.util.LinkedList;
import java.util.Random;
 
public class TestPOP_seg_protected extends TestUnit implements Serializable {
    public static void main(String args[]) throws Exception {
        run_test(TestPOP_seg_protected.class);
    }
 
    //--------------------------------------------------------------------------
    @Override
    public int get_test_count() throws Exception {
        return 100;
    }
 
    @Override
    public void init() throws Exception {
 
        random = new Random(353 + index);
 
        /* 0. zero selector
         * 1. fetch descriptor failed:
         *      - index over limit (GDT,LDT)
         *      - LDT not valid
         * 2. descriptor check failed:
         *      - descriptor type not valid, privilege not valid,
         * 3. all ok
         */
 
        int type = random.nextInt(4);
 
        String instruction;
        while(true) {
            layers.clear();
 
            long    next_cs_rpl;
            boolean descr_seg;
            int     descr_type;
            int     descr_dpl;
            boolean descr_present;
            long    selector_rpl;
 
            should_be_ss = random.nextInt(3) == 0;
 
            if(should_be_ss == false) {
                int cond = (type == 3)? 0 : 1 << (random.nextInt(100000) % 4);
 
                boolean xs_cond_1;
                boolean xs_cond_2;
                boolean xs_cond_3;
                boolean xs_cond_4;
 
                do {
                    descr_seg       = random.nextBoolean();
                    descr_type      = random.nextInt(16);
                    descr_dpl       = random.nextInt(4);
                    next_cs_rpl     = random.nextInt(4);
                    descr_present   = random.nextBoolean();
                    selector_rpl    = random.nextInt(4);
 
                    xs_cond_1 = descr_seg == false;
                    xs_cond_2 = (descr_type & 8) != 0 && (descr_type & 2) == 0; // code and not readable
                    xs_cond_3 = ( (descr_type & 8) == 0 || ((descr_type & 8) != 0 && (descr_type & 2) != 0 && (descr_type & 4) == 0) ) &&
                            ( selector_rpl > descr_dpl || next_cs_rpl > descr_dpl );
                    xs_cond_4 = descr_present == false;
                }
                while(!isAccepted(cond, xs_cond_1,xs_cond_2,xs_cond_3,xs_cond_4));
 
                System.out.printf("/xs cond: %d/\n", cond);
            }
            else {
                int cond = (type == 3)? 0 : 1 << (random.nextInt(100000) % 6);
 
                boolean ss_cond_1;
                boolean ss_cond_2;
                boolean ss_cond_3;
                boolean ss_cond_4;
                boolean ss_cond_5;
                boolean ss_cond_6;
 
                do {
                    next_cs_rpl     = random.nextInt(4);
                    descr_seg       = random.nextBoolean();
                    descr_type      = random.nextInt(16);
                    descr_dpl       = random.nextInt(4);
                    descr_present   = random.nextBoolean();
                    selector_rpl    = random.nextInt(4);
 
                    ss_cond_1 = selector_rpl != next_cs_rpl;
                    ss_cond_2 = descr_seg == false;
                    ss_cond_3 = (descr_type & 8) != 0;
                    ss_cond_4 = (descr_type & 2) == 0;
                    ss_cond_5 = descr_dpl != next_cs_rpl;
                    ss_cond_6 = descr_present == false;
                }
                while(!isAccepted(cond, ss_cond_1,ss_cond_2,ss_cond_3,ss_cond_4,ss_cond_5,ss_cond_6));
 
                System.out.printf("/ss cond: %d/\n", cond);
            }
 
            //0-real; 1-v8086; 2-protected
            int mode = 2;
 
            LinkedList<Pair<Long, Long>> prohibited_list = new LinkedList<>();
 
            InstructionLayer instr = new InstructionLayer(random, prohibited_list);
            layers.add(instr);
            StackLayer stack = new StackLayer(random, prohibited_list); 
            layers.add(stack);
            layers.add(new OtherLayer((mode >= 1)? OtherLayer.Type.PROTECTED_OR_V8086 : OtherLayer.Type.REAL, random));
            layers.add(new FlagsLayer((mode == 1)? FlagsLayer.Type.V8086 : (mode == 2)? FlagsLayer.Type.NOT_V8086 : FlagsLayer.Type.RANDOM, random));
            layers.add(new GeneralRegisterLayer(random));
            layers.add(new SegmentLayer(random));
            layers.add(new MemoryLayer(random));
            layers.add(new IOLayer(random));
            layers.addFirst(new HandleModeChangeLayer(
                    getInput("cr0_pe"),
                    getInput("vmflag"),
                    next_cs_rpl, //getInput("cs_rpl"),
                    getInput("cs_p"),
                    getInput("cs_s"),
                    getInput("cs_type")
            ));
 
            // instruction size
            boolean cs_d_b = getInput("cs_d_b") == 1;
            long    cs_rpl = getInput("cs_rpl");
 
            boolean a32 = random.nextBoolean();
            boolean o32 = random.nextBoolean();
 
            long selector = 0;
 
            if(type == 0) {
                selector = random.nextInt(4);
            }
            else if(type == 1) {
                boolean ldtr_valid = random.nextInt(5) != 0;
 
                DescriptorTableLayer tables = new DescriptorTableLayer(random, prohibited_list, ldtr_valid);
 
                boolean is_ldt = random.nextBoolean();
 
                int index = tables.getOutOfBoundsIndex(is_ldt);
                if(index == -1) continue;
 
                if(ldtr_valid == false && is_ldt) index = 0;
 
                index = index << 3;
                if(is_ldt) index |= 4;
 
                index |= random.nextInt(4);
 
                selector = index;
 
                layers.addFirst(tables);
            }
            else if(type >= 2) {
                TestUnit.Descriptor desc = new TestUnit.Descriptor(
                        random.nextInt(), //base
                        random.nextInt() & 0xFFFFF, //limit
                        descr_type,
                        descr_seg,
                        descr_present,
                        descr_dpl,
                        random.nextBoolean(), //d_b
                        random.nextBoolean(), //g
                        random.nextBoolean(), //l
                        random.nextBoolean()  //avl
                );
 
                DescriptorTableLayer tables = new DescriptorTableLayer(random, prohibited_list, true);
 
                boolean is_ldt = random.nextBoolean();
 
                int index = tables.addDescriptor(is_ldt, desc);
                if(index == -1) continue;
 
                index = index << 3;
                if(is_ldt) index |= 4;
 
                index |= selector_rpl;
 
                selector = index;
 
                layers.addFirst(tables);
            }
 
System.out.printf("selector: %x\n", selector);
 
            stack.push_word((int)selector);
            stack.push_word((int)selector);
 
            // instruction
            instruction = prepare_instr(cs_d_b, a32, o32);
 
            instruction += instruction;
            instruction += "0F0F";
 
            // add instruction
            instr.add_instruction(instruction);
 
            // end condition
            break;
        }
 
        System.out.println("Instruction: [" + instruction + "]");
    }
 
    String prepare_instr(boolean cs_d_b, boolean a32, boolean o32) throws Exception {
 
        int opcodes[] = {
            0x07,0x17,0x1F,0xA1,0xA9
        };
 
        String prefix = "";
        if(cs_d_b != o32) { prefix = "66" + prefix; }
        if(cs_d_b != a32) { prefix = "67" + prefix; }
 
        int opcode = opcodes[random.nextInt(opcodes.length)];
 
        if(should_be_ss) opcode = 0x17;
 
        byte instr[] = new byte[1];
        instr[0] = (byte)opcode;
 
        return prefix + ((opcode == 0xA1 || opcode == 0xA9)? "0F" : "") + bytesToHex(instr);
    }
 
    boolean should_be_ss;
}