ncv/ncval_tests.c

   1 /*
   2  * Copyright 2008, Google Inc.
   3  * All rights reserved.
   4  *
   5  * Redistribution and use in source and binary forms, with or without
   6  * modification, are permitted provided that the following conditions are
   7  * met:
   8  *
   9  *     * Redistributions of source code must retain the above copyright
  10  * notice, this list of conditions and the following disclaimer.
  11  *     * Redistributions in binary form must reproduce the above
  12  * copyright notice, this list of conditions and the following disclaimer
  13  * in the documentation and/or other materials provided with the
  14  * distribution.
  15  *     * Neither the name of Google Inc. nor the names of its
  16  * contributors may be used to endorse or promote products derived from
  17  * this software without specific prior written permission.
  18  *
  19  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  20  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  21  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
  22  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
  23  * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  24  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
  25  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  26  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  27  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  28  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  29  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  30  */
  31
  32 /*
  33  * ncval_tests.c - simple unit tests for NaCl validator
  34  */
  35 #include "native_client/include/portability.h"
  36 #include <stdio.h>
  37 #include <stdlib.h>
  38 #include <string.h>
  39 #include "native_client/ncv/ncvalidate.h"
  40 #include "native_client/ncv/ncvalidate_internaltypes.h"
  41
  42 struct NCValTestCase {
  43   char *name;
  44   char *description;
  45   int sawfailure;
  46   uint32_t instructions;
  47   uint32_t illegalinst;
  48   int testsize;
  49   uint32_t vaddr;
  50   uint8_t *testbytes;
  51 };
  52
  53 struct NCValTestCase NCValTests[] = {
  54   {
  55     "test 1",
  56     "a first very simple test with an illegal inst.",
  57     1, 9, 1, 26, 0x80000000,
  58     (uint8_t *)"\x55"
  59     "\x89\xe5"
  60     "\x83\xec\x08"
  61     "\xe8\x81\x00\x00\x00"
  62     "\xe8\xd3\x00\x00\x00"
  63     "\xe8\xf3\x04\x00\x00"
  64     "\xc9"
  65     "\xc3"
  66     "\x00\x00\xf4",
  67   },
  68   {
  69     "test 2",
  70     "like test 1 but no illegal inst",
  71     1, 9, 0, 26, 0x80000000,
  72     (uint8_t *)"\x55"
  73     "\x89\xe5"
  74     "\x83\xec\x08"
  75     "\xe8\x81\x00\x00\x00"
  76     "\xe8\xd3\x00\x00\x00"
  77     "\xe8\xf3\x04\x00\x00"
  78     "\xc9"
  79     "\x90"
  80     "\x00\x00\xf4",
  81   },
  82   {
  83     "test 3",
  84     "like test 1 but no illegal inst, with bad alignment",
  85     1, 9, 0, 26, 0x80000001,
  86     (uint8_t *)"\x55"
  87     "\x89\xe5"
  88     "\x83\xec\x08"
  89     "\xe8\x81\x00\x00\x00"
  90     "\xe8\xd3\x00\x00\x00"
  91     "\xe8\xf3\x04\x00\x00"
  92     "\xc9"
  93     "\x90"
  94     "\x00\x00\xf4",
  95   },
  96   {
  97     "test 4",
  98     "a longer simple test with a bad jump target",
  99     1, 90, 0, 336, 0x8054600,
 100     (uint8_t *)"\x8d\x4c\x24\x04"
 101     "\x83\xe4\xf0"
 102     "\xff\x71\xfc"
 103     "\x55"
 104     "\x89\xe5"
 105     "\x51"
 106     "\x66\x90"
 107     "\x83\xec\x24"
 108     "\x89\x4d\xe8"
 109     "\xc7\x45\xf4\x0a\x00\x00\x00"
 110     "\x8b\x45\xe8"
 111     "\x83\x38\x01"
 112     "\x7f\x2b"
 113     "\x8b\x55\xe8"
 114     "\x8b\x42\x04"
 115     "\x8b\x00"
 116     "\x8d\x76\x00"
 117     "\x89\x44\x24\x04"
 118     "\xc7\x04\x24\x54\x14\x00\x08"
 119     "\xe8\xc0\x02\x00\x00"
 120     "\xc7\x04\x24\x01\x00\x00\x00"
 121     "\x8d\x74\x26\x00"
 122     "\xe8\xc0\x01\x00\x00"
 123     "\x8b\x55\xe8"
 124     "\x8b\x42\x04"
 125     "\x83\xc0\x04"
 126     "\x8b\x00"
 127     "\x89\x04\x24"
 128     "\x66\x90"
 129     "\x8d\x74\x26\x00"
 130     "\x8d\xbc\x27\x00\x00\x00\x00"
 131     "\xe8\x90\x09\x00\x00"
 132     "\x89\x45\xf8"
 133     "\x8b\x45\xe8"
 134     "\x83\x38\x02"
 135     "\x7e\x25"
 136     "\x8b\x55\xe8"
 137     "\x66\x90"
 138     "\x8b\x42\x04"
 139     "\x83\xc0\x08"
 140     "\x8b\x00"
 141     "\x89\x04\x24"
 142     "\xe8\x70\x09\x00\x00"
 143     "\x89\x45\xf4"
 144     "\x8d\xb6\x00\x00\x00\x00"
 145     "\x8d\xbc\x27\x00\x00\x00\x00"
 146     "\x8b\x45\xf4"
 147     "\xa3\x28\x2f\x00\x08"
 148     "\xeb\x26"
 149     "\x8d\xb6\x00\x00\x00\x00"
 150     "\xc7\x44\x24\x08\x03\x00\x00\x00"
 151     "\xc7\x44\x24\x04\x01\x00\x00\x00"
 152     "\x8b\x45\xf4"
 153     "\x89\x04\x24"
 154     "\x90"
 155     "\x8d\x74\x26\x00"
 156     "\xe8\x20\x00\x00\x00"
 157     "\x83\x7d\xf8\x00"
 158     "\x0f\x9f\xc0"
 159     "\x83\x6d\xf8\x01"
 160     "\x84\xc0"
 161     "\x8d\x76\x00"
 162     "\x75\xce"
 163     "\xc7\x04\x24\x00\x00\x00\x00"
 164     "\x66\x90"
 165     "\xe8\x20\x01\x00\x00"
 166     "\x55"
 167     "\x89\xe5"
 168     "\x83\xec\x1c"
 169     "\x83\x7d\x08\x01"
 170     "\x75\x44"
 171     "\x8b\x55\x0c"
 172     "\x90"
 173     "\x8b\x04\x95\x24\x2f\x00\x08"
 174     "\x83\xe8\x01"
 175     "\x8d\xb6\x00\x00\x00\x00"
 176     "\x89\x04\x95\x24\x2f\x00\x08"
 177     "\x8b\x55\x10"
 178     "\x8d\xb6\x00\x00\x00\x00"
 179     "\x8b\x04\x95\x24\x2f\x00\x08"
 180     "\x83\xc0\x01"
 181     "\x8d\xb6\x00\x00\x00\x00"
 182     "\x89\x04\x95\x24\x2f\x00\x08"
 183     "\xeb\x77"
 184     "\x8d\xb4\x26\x00\x00\x00\x00"
 185     "\x8b\x45\x10"
 186     "\x8b\x55\x0c"
 187     "\x01\xc2"
 188     "\xb8\x06\x00\x00\x00"
 189     "\x29\xd0"
 190     "\x90"
 191   },
 192   {
 193     "test 5",
 194     "like test 4; with bad jump target",
 195     1, 90, 0, 336, 0x8054600,
 196     (uint8_t *)"\x8d\x4c\x24\x04"
 197     "\x83\xe4\xf0"
 198     "\xff\x71\xfc"
 199     "\x55"
 200     "\x89\xe5"
 201     "\x51"
 202     "\x66\x90"
 203     "\x83\xec\x24"
 204     "\x89\x4d\xe8"
 205     "\xc7\x45\xf4\x0a\x00\x00\x00"
 206     "\x8b\x45\xe8"
 207     "\x83\x38\x01"
 208     "\x7f\x2b"
 209     "\x8b\x55\xe8"
 210     "\x8b\x42\x04"
 211     "\x8b\x00"
 212     "\x8d\x76\x00"
 213     "\x89\x44\x24\x04"
 214     "\xc7\x04\x24\x54\x14\x00\x08"
 215     "\xe8\xc0\x02\x00\x00"
 216     "\xc7\x04\x24\x01\x00\x00\x00"
 217     "\x8d\x74\x26\x00"
 218     "\xe8\xc0\x01\x00\x00"
 219     "\x8b\x55\xe8"
 220     "\x8b\x42\x04"
 221     "\x83\xc0\x04"
 222     "\x8b\x00"
 223     "\x89\x04\x24"
 224     "\x66\x90"
 225     "\x8d\x74\x26\x00"
 226     "\x8d\xbc\x27\x00\x00\x00\x00"
 227     "\xe8\x90\x09\x00\x00"
 228     "\x89\x45\xf8"
 229     "\x8b\x45\xe8"
 230     "\x83\x38\x02"
 231     "\x7e\x25"
 232     "\x8b\x55\xe8"
 233     "\x66\x90"
 234     "\x8b\x42\x04"
 235     "\x83\xc0\x08"
 236     "\x8b\x00"
 237     "\x89\x04\x24"
 238     "\xe8\x70\x09\x00\x00"
 239     "\x89\x45\xf4"
 240     "\x8d\xb6\x00\x00\x00\x00"
 241     "\x8d\xbc\x27\x00\x00\x00\x00"
 242     "\x8b\x45\xf4"
 243     "\xa3\x28\x2f\x00\x08"
 244     "\xeb\x26"
 245     "\x8d\xb6\x00\x00\x00\x00"
 246     "\xc7\x44\x24\x08\x03\x00\x00\x00"
 247     "\xc7\x44\x24\x04\x01\x00\x00\x00"
 248     "\x8b\x45\xf4"
 249     "\x89\x04\x24"
 250     "\x90"
 251     "\x8d\x74\x26\x00"
 252     "\xe8\x20\x00\x00\x00"
 253     "\x83\x7d\xf8\x00"
 254     "\x0f\x9f\xc0"
 255     "\x83\x6d\xf8\x01"
 256     "\x84\xc0"
 257     "\x8d\x76\x00"
 258     "\x75\xce"
 259     "\xc7\x04\x24\x00\x00\x00\x00"
 260     "\x66\x90"
 261     "\xe8\x20\x01\x00\x00"
 262     "\x55"
 263     "\x89\xe5"
 264     "\x83\xec\x1c"
 265     "\x83\x7d\x08\x01"
 266     "\x75\x44"
 267     "\x8b\x55\x0c"
 268     "\x90"
 269     "\x8b\x04\x95\x24\x2f\x00\x08"
 270     "\x83\xe8\x01"
 271     "\x8d\xb6\x00\x00\x00\x00"
 272     "\x89\x04\x95\x24\x2f\x00\x08"
 273     "\x8b\x55\x10"
 274     "\x8d\xb6\x00\x00\x00\x00"
 275     "\x8b\x04\x95\x24\x2f\x00\x08"
 276     "\x83\xc0\x01"
 277     "\x8d\xb6\x00\x00\x00\x00"
 278     "\x89\x04\x95\x24\x2f\x00\x08"
 279     "\x00\x00"
 280     "\x8d\xb4\x26\x00\x00\x00\x00"
 281     "\x8b\x45\x10"
 282     "\x8b\x55\x0c"
 283     "\x01\xc2"
 284     "\xb8\x06\x00\x00\x00"
 285     "\x29\xd0"
 286     "\xf4"
 287   },
 288   {
 289     "test 6",
 290     "test 6: 3c 25   cmp %al, $I",
 291     0, 7, 0, 9, 0x80000000,
 292     (uint8_t *)"\x3c\x25"
 293     "\x90\x90\x90\x90\x90\x90\xf4"
 294   },
 295   {
 296     "test 7",
 297     "test 7: group2, three byte move",
 298     0, 8, 0, 13, 0x80000000,
 299     (uint8_t *)"\xc1\xf9\x1f\x89\x4d\xe4"
 300     "\x90\x90\x90\x90\x90\x90\xf4"
 301   },
 302   {
 303     "test 8",
 304     "test 8: five byte move",
 305     0, 7, 0, 12, 0x80000000,
 306     (uint8_t *)"\xc6\x44\x05\xd6\x00"
 307     "\x90\x90\x90\x90\x90\x90\xf4"
 308   },
 309   {
 310     "test 9",
 311     "test 9: seven byte control transfer, unprotected",
 312     1, 7, 0, 14, 0x80000000,
 313     (uint8_t *)"\xff\x24\x95\xc8\x6e\x05\x08"
 314     "\x90\x90\x90\x90\x90\x90\xf4"
 315   },
 316   {
 317     "test 10",
 318     "test 10: eight byte bts instruction",
 319     1, 7, 1, 15, 0x80000000,
 320     (uint8_t *)"\x0f\xab\x14\x85\x40\xfb\x27\x08"
 321     "\x90\x90\x90\x90\x90\x90\xf4",
 322   },
 323   {
 324     "test 11",
 325     "test 11: four byte move",
 326     0, 7, 0, 11, 0x80000000,
 327     (uint8_t *)"\x66\xbf\x08\x00"
 328     "\x90\x90\x90\x90\x90\x90\xf4",
 329   },
 330   {
 331     "test 12",
 332     "test 12: five byte movsx",
 333     0, 7, 0, 12, 0x80000000,
 334     (uint8_t *)"\x66\x0f\xbe\x04\x10"
 335     "\x90\x90\x90\x90\x90\x90\xf4"
 336   },
 337   {
 338     "test 13",
 339     "test 13: eight byte bts instruction, missing full stop",
 340     1, 7, 1, 15, 0x80000000,
 341     (uint8_t *)"\x0f\xab\x14\x85\x40\xfb\x27\x08"
 342     "\x90\x90\x90\x90\x90\x90\x90",
 343   },
 344   /* ldmxcsr, stmxcsr */
 345   {
 346     "test 14",
 347     "test 14: ldmxcsr, stmxcsr",
 348     1, 10, 2, 15, 0x80000000,
 349     (uint8_t *)"\x90\x0f\xae\x10\x90\x0f\xae\x18"
 350     "\x90\x90\x90\x90\x90\x90\xf4",
 351   },
 352   /* invalid */
 353   {
 354     "test 15",
 355     "test 15: invalid instruction",
 356     1, 8, 1, 11, 0x80000000,
 357     (uint8_t *)"\x90\x0f\xae\x21"
 358     "\x90\x90\x90\x90\x90\x90\xf4",
 359   },
 360   /* lfence */
 361   {
 362     "test 16",
 363     "test 16: lfence",
 364     1, 8, 1, 11, 0x80000000,
 365     (uint8_t *)"\x90\x0f\xae\x28"
 366     "\x90\x90\x90\x90\x90\x90\xf4",
 367   },
 368   {
 369     "test 17",
 370     "test 17: lock cmpxchg",
 371     0, 4, 0, 12, 0x80000000,
 372     (uint8_t *)"\xf0\x0f\xb1\x8f\xa8\x01\x00\x00"
 373     "\x90\x90\x90\xf4",
 374   },
 375   {
 376     "test 18",
 377     "test 18: loop branch into overlapping instruction",
 378     1, 3, 1, 10, 0x80000000,
 379     (uint8_t *)"\xbb\x90\x40\xcd\x80\x85\xc0\xe1\xf8\xf4",
 380   },
 381   {
 382     "test 19",
 383     "test 19: aad test",
 384     1, 5, 2, 15, 0x80000000,
 385     (uint8_t *)"\x68\x8a\x80\x04\x08\xd5\xb0\xc3\x90\xbb\x90\x40\xcd\x80\xf4"
 386   },
 387   {
 388     "test 20",
 389     "test 20: addr16 lea",
 390     1, 5, 2, 19, 0x80000000,
 391     (uint8_t *)"\x68\x8e\x80\x04\x08\x66\x67\x8d\x98\xff\xff\xc3\x90\xbb\x90\x40\xcd\x80\xf4"
 392   },
 393   {
 394     "test 21",
 395     "test 21: aam",
 396     1, 4, 2, 14, 0x80000000,
 397     (uint8_t *)"\x68\x89\x80\x04\x08\xd4\xb0\xc3\xbb\x90\x40\xcd\xf4",
 398   },
 399   {
 400     "test 22",
 401     "test 22: pshufw",
 402     1, 4, 1, 16, 0x80000000,
 403     (uint8_t *)"\x68\x8b\x80\x04\x08\x0f\x70\xca\xb3\xc3\xbb\x90\x40\xcd\x80\xf4",
 404   },
 405   {
 406     "test 23",
 407     "test 23: 14-byte nacljmp using eax",
 408     1, 3, 0, 15, 0x80000000,
 409     (uint8_t *)"\x81\xe0\xff\xff\xff\xff\x81\xc8\x00\x00\x00\x00\xff\xd0\xf4",
 410   },
 411   {
 412     "test 24",
 413     "test 24: 5-byte nacljmp",
 414     0, 2, 0, 6, 0x80000000,
 415     (uint8_t *)"\x83\xe0\xf0\xff\xe0\xf4",
 416   },
 417   {
 418     "test 25",
 419     "test 25: 0xe3 jmp",
 420     1, 1, 1, 3, 0x80000000,
 421     (uint8_t *)"\xe3\x00\xf4",
 422   },
 423   {
 424     "test 26",
 425     "test 26: 0xe9 jmp, nop",
 426     0, 2, 0, 7, 0x80000000,
 427     (uint8_t *)"\xe9\x00\x00\x00\x00\x90\xf4",
 428   },
 429   {
 430     "test 27",
 431     "test 27: 0xf0 0x80 jmp, nop",
 432     0, 2, 0, 8, 0x80000000,
 433     (uint8_t *)"\x0f\x80\x00\x00\x00\x00\x90\xf4",
 434   },
 435   {
 436     "test 28",
 437     "test 28: 0xe9 jmp",
 438     1, 1, 0, 6, 0x80000000,
 439     (uint8_t *)"\xe9\x00\x00\x00\x00\xf4",
 440   },
 441   {
 442     "test 30",
 443     "test 30: addr16 lea ret",
 444     1, 3, 2, 8, 0x80000000,
 445     (uint8_t *)"\x67\x8d\xb4\x9a\x40\xc3\x90\xf4",
 446   },
 447   {
 448     "test 31",
 449     "test 31: repz movsbl",
 450     1, 3, 2, 8, 0x80000000,
 451     (uint8_t *)"\xf3\x0f\xbe\x40\xd0\xc3\x90\xf4",
 452   },
 453   {
 454     "test 32",
 455     "test 32: infinite loop",
 456     0, 1, 0, 3, 0x80000000,
 457     (uint8_t *)"\x7f\xfe\xf4",
 458   },
 459   {
 460     "test 33",
 461     "test 33: bad branch",
 462     1, 1, 0, 3, 0x80000000,
 463     (uint8_t *)"\x7f\xfd\xf4",
 464   },
 465   {
 466     "test 34",
 467     "test 34: bad branch",
 468     1, 1, 0, 3, 0x80000000,
 469     (uint8_t *)"\x7f\xff\xf4",
 470   },
 471   {
 472     "test 35",
 473     "test 35: bad branch",
 474     1, 1, 0, 3, 0x80000000,
 475     (uint8_t *)"\x7f\x00\xf4",
 476   },
 477   {
 478     "test 36",
 479     "test 36: bad branch",
 480     1, 1, 0, 3, 0x80000000,
 481     (uint8_t *)"\x7f\x01\xf4",
 482   },
 483   {
 484     "test 37",
 485     "test 37: bad branch",
 486     1, 1, 0, 3, 0x80000000,
 487     (uint8_t *)"\x7f\x02\xf4",
 488   },
 489   {
 490     "test 38",
 491     "test 38: intc",
 492     1, 10, 8, 18, 0x80000000,
 493     (uint8_t *)"\x66\xeb\x1b\x31\x51\x3d\xef\xcc\x2f\x36\x48\x6e\x44\x2e\xcc\x14\xf4\xf4",
 494   },
 495   {
 496     "test 39",
 497     "test 39: bad branch",
 498     1, 7, 2, 18, 0x80000000,
 499     (uint8_t *)"\x67\x8d\x1d\x22\xa0\x05\xe3\x7b\x9c\xdb\x08\x04\xb1\x90\xed\x12\xf4\xf4",
 500   },
 501   {
 502     "test 40",
 503     "test 40: more addr16 problems",
 504     1, 4, 2, 9, 0x80000000,
 505     (uint8_t *)"\x67\xa0\x00\x00\xcd\x80\x90\x90\xf4",
 506   },
 507   {
 508     "test 41",
 509     "test 41: the latest non-bug from hcf",
 510     1, 5, 1, 17, 0x80000000,
 511     (uint8_t *)"\x84\xd4\x04\x53\xa0\x04\x6a\x5a\x20\xcc\xb8\x48\x03\x2b\x96\x11\xf4"
 512   },
 513   {
 514     "test 42",
 515     "test 42: another case from hcf",
 516     1, 7, 1, 17, 0x80000000,
 517     (uint8_t *)"\x45\x7f\x89\x58\x94\x04\x24\x1b\xc3\xe2\x6f\x1a\x94\x87\x8f\x0b\xf4",
 518   },
 519   {
 520     "test 43",
 521     "test 43: too many prefix bytes",
 522     1, 2, 1, 8, 0x80000000,
 523     (uint8_t *)"\x66\x66\x66\x66\x00\x00\x90\xf4"
 524   },
 525   {
 526     "test 44",
 527     "test 44: palignr (SSSE3)",
 528     0, 2, 0, 8, 0x80000000,
 529     (uint8_t *)"\x66\x0f\x3a\x0f\xd0\xc0\x90\xf4"
 530   },
 531   {
 532     "test 45",
 533     "test 45: undefined inst in 3-byte opcode space",
 534     1, 2, 2, 8, 0x80000000,
 535     (uint8_t *)"\x66\x0f\x39\x0f\xd0\xc0\x90\xf4"
 536   },
 537   {
 538     "test 46",
 539     "test 46: SSE2x near miss",
 540     1, 2, 1, 7, 0x80000000,
 541     (uint8_t *)"\x66\x0f\x73\x00\x00\x90\xf4"
 542   },
 543   {
 544     "test 47",
 545     "test 47: SSE2x",
 546     0, 2, 0, 7, 0x80000000,
 547     (uint8_t *)"\x66\x0f\x73\xff\x00\x90\xf4"
 548   },
 549   {
 550     "test 48",
 551     "test 48: SSE2x, missing required prefix byte",
 552     1, 2, 1, 6, 0x80000000,
 553     (uint8_t *)"\x0f\x73\xff\x00\x90\xf4"
 554   },
 555   {
 556     "test 49",
 557     "test 49: 3DNow example",
 558     0, 2, 0, 7, 0x80000000,
 559     (uint8_t *)"\x0f\x0f\x46\x01\xbf\x90\xf4"
 560   },
 561   {
 562     "test 50",
 563     "test 50: 3DNow error example 1",
 564     1, 2, 1, 7, 0x80000000,
 565     (uint8_t *)"\x0f\x0f\x46\x01\x00\x90\xf4"
 566   },
 567   {
 568     "test 51",
 569     "test 51: 3DNow error example 2",
 570     1, 0, 0, 5, 0x80000000,
 571     (uint8_t *)"\x0f\x0f\x46\x01\xf4"
 572   },
 573   {
 574     "test 52",
 575     "test 52: 3DNow error example 3",
 576     1, 2, 1, 7, 0x80000000,
 577     (uint8_t *)"\x0f\x0f\x46\x01\xbe\x90\xf4"
 578   },
 579   {
 580     "test 53",
 581     "test 53: 3DNow error example 4",
 582     1, 2, 1, 7, 0x80000000,
 583     (uint8_t *)"\x0f\x0f\x46\x01\xaf\x90\xf4"
 584   },
 585   {
 586     "test 54",
 587     "test 54: SSE4",
 588     0, 2, 0, 8, 0x80000000,
 589     (uint8_t *)"\x66\x0f\x3a\x0e\xd0\xc0\x90\xf4"
 590   },
 591   {
 592     "test 55",
 593     "test 55: SSE4",
 594     0, 3, 0, 8, 0x80000000,
 595     (uint8_t *)"\x66\x0f\x38\x0a\xd0\x90\x90\xf4"
 596   },
 597   {
 598     "test 56",
 599     "test 56: incb decb",
 600     0, 3, 0, 14, 0x80000000,
 601     (uint8_t *)"\xfe\x85\x4f\xfd\xff\xff\xfe\x8d\x73\xfd\xff\xff\x90\xf4",
 602   },
 603   {
 604     "test 57",
 605     "test 57: lzcnt",
 606     0, 2, 0, 6, 0x80000000,
 607     (uint8_t *)"\xf3\x0f\xbd\x00\x90\xf4",
 608   },
 609   {
 610     "test 58",
 611     "test 58: fldz",
 612     0, 2, 0, 4, 0x80000000,
 613     (uint8_t *)"\xd9\xee\x90\xf4",
 614   },
 615   {
 616     "test 59",
 617     "test 59: x87",
 618     0, 7, 0, 25, 0x80000000,
 619     (uint8_t *)"\xdd\x9c\xfd\xb0\xfe\xff\xff"
 620     "\xdd\x9d\x40\xff\xff\xff"
 621     "\xdb\x04\x24"
 622     "\xdd\x5d\xa0"
 623     "\xda\xe9"
 624     "\xdf\xe0"
 625     "\x90\xf4",
 626   },
 627   {
 628     "test 60",
 629     "test 60: x87 bad instructions",
 630     1, 19, 9, 40, 0x80000000,
 631     (uint8_t *)"\xdd\xcc"
 632     "\xdd\xc0"
 633     "\xdd\xc7"
 634     "\xdd\xc8"
 635     "\xdd\xcf"
 636     "\xdd\xf0"
 637     "\xdd\xff"
 638     "\xdd\xfd"
 639     "\xde\xd1"
 640     "\xde\xd9"
 641     "\xdb\x04\x24"
 642     "\xdd\x5d\xa0"
 643     "\xdb\xe0"
 644     "\xdb\xff"
 645     "\xdb\xe8"
 646     "\xdb\xf7"
 647     "\xda\xe9"
 648     "\xdf\xe0"
 649     "\x90\xf4",
 650   },
 651   {
 652     "test 61",
 653     "test 61: 3DNow prefetch",
 654     0, 2, 0, 5, 0x80000000,
 655     (uint8_t *)"\x0f\x0d\x00"
 656     "\x90\xf4",
 657   },
 658   {
 659     "test 61.1",
 660     "test 61.1: F2 0F ...",
 661     1, 3, 1, 13, 0x80000000,
 662     (uint8_t *)"\xf2\x0f\x48\x0f\x48\xa4\x52"
 663     "\xf2\x0f\x10\xc8"
 664     "\x90\xf4",
 665   },
 666   {
 667     "test 62",
 668     "test 62: f6/f7 test Ib/Iv ...",
 669     0, 10, 0, 28, 0x80000000,
 670     (uint8_t *)"\xf6\xc1\xff"
 671     "\xf6\x44\x43\x01\x02"
 672     "\xf7\xc6\x03\x00\x00\x00"
 673     "\x90\x90\x90\x90\x90"
 674     "\xf7\x45\x18\x00\x00\x00\x20"
 675     "\x90\xf4",
 676   },
 677   {
 678     "test 63",
 679     "test 63: addr16 corner cases ...",
 680     1, 5, 4, 17, 0x80000000,
 681     (uint8_t *)"\x67\x01\x00"
 682     "\x67\x01\x40\x00"
 683     "\x67\x01\x80\x00\x90"
 684     "\x67\x01\xc0"
 685     "\x90\xf4",
 686   },
 687   {
 688     "test 64",
 689     "test 64: text starts with indirect jmp ...",
 690     1, 2, 0, 4, 0x80000000,
 691     (uint8_t *)"\xff\xd0\x90\xf4"
 692   },
 693   {
 694     "test 65",
 695     "test 65: nacljmp crosses 32-byte boundary ...",
 696     1, 32, 0, 36, 0x80000000,
 697     (uint8_t *)"\x90\x90\x90\x90\x90\x90\x90\x90"
 698     "\x90\x90\x90\x90\x90\x90\x90\x90"
 699     "\x90\x90\x90\x90\x90\x90\x90\x90"
 700     "\x90\x90\x90\x90\x90\x83\xe0\xff"
 701     "\xff\xd0\x90\xf4"
 702   },
 703   {
 704     /* I think this is currently NACLi_ILLEGAL */
 705     "test 65",
 706     "test 65: NACLi_CFLUSH",
 707     1, 2, 1, 10, 0x80000000,
 708     (uint8_t *)"\x0f\xae\x00\x00\x90\x90\x90\x90\x90\xf4"
 709   },
 710   {
 711     "test 66",
 712     "test 66: NACLi_CMPXCHG8B",
 713     0, 2, 0, 6, 0x80000000,
 714     (uint8_t *)"\xf0\x0f\xc7\010\x90\xf4"
 715   },
 716   {
 717     "test 67",
 718     "test 67: NACLi_FCMOV",
 719     0, 7, 0, 10, 0x80000000,
 720     (uint8_t *)"\xda\xc0\x00\x00\x90\x90\x90\x90\x90\xf4"
 721   },
 722   {
 723     "test 68",
 724     "test 68: NACLi_MMX",
 725     0, 4, 0, 7, 0x80000000,
 726     (uint8_t *)"\x0f\x60\x00\x90\x90\x90\xf4"
 727   },
 728   {
 729     "test 69",
 730     "test 69: NACLi_SSE",
 731     0, 2, 0, 9, 0x80000000,
 732     (uint8_t *)"\x0f\x5e\x90\x90\x90\x90\x90\x90\xf4"
 733   },
 734   {
 735     "test 70",
 736     "test 70: NACLi_SSE2",
 737     0, 4, 0, 8, 0x80000000,
 738     (uint8_t *)"\x66\x0f\x60\x00\x90\x90\x90\xf4"
 739   },
 740   {
 741     "test 71",
 742     "test 71: NACLi_SSE3",
 743     0, 4, 0, 8, 0x80000000,
 744     (uint8_t *)"\x66\x0f\x7d\x00\x90\x90\x90\xf4"
 745   },
 746   {
 747     "test 72",
 748     "test 72: NACLi_SSE4A",
 749     0, 4, 0, 8, 0x80000000,
 750     (uint8_t *)"\xf2\x0f\x79\x00\x90\x90\x90\xf4"
 751   },
 752   {
 753     "test 73",
 754     "test 73: NACLi_POPCNT",
 755     0, 2, 0, 6, 0x80000000,
 756     (uint8_t *)"\xf3\x0f\xb8\x00\x90\xf4"
 757   },
 758   {
 759     "test 74",
 760     "test 74: NACLi_E3DNOW",
 761     0, 2, 0, 7, 0x80000000,
 762     (uint8_t *)"\x0f\x0f\x46\x01\xbb\x90\xf4"
 763   },
 764   {
 765     "test 75",
 766     "test 75: NACLi_MMXSSE2",
 767     0, 2, 0, 7, 0x80000000,
 768     (uint8_t *)"\x66\x0f\x71\xf6\x00\x90\xf4",
 769   },
 770   {
 771     "test 76",
 772     "test 76: mov eax, ss",
 773     1, 4, 4, 9, 0x80000000,
 774     (uint8_t *)"\x8e\xd0\x8c\xd0\x66\x8c\xd0\x90\xf4",
 775   },
 776   {
 777     "test 77",
 778     "test 77: call esp",
 779     1, 3, 0, 7, 0x80000000,
 780     (uint8_t *)"\x83\xe4\xf0\xff\xd4\x90\xf4",
 781   },
 782   /* code.google.com issue 23 reported by defend.the.world on 11 Dec 2008 */
 783   {
 784     "test 78",
 785     "test 78: call (*edx)",
 786     1, 30, 0, 34, 0x80000000,
 787     (uint8_t *)
 788     "\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"
 789     "\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"
 790     "\x83\xe2\xf0" /* and */
 791     "\xff\x12"     /* call (*edx) */
 792     "\x90\xf4",    /* nop halt */
 793   },
 794   {
 795     "test 79",
 796     "test 79: call *edx",
 797     0, 30, 0, 34, 0x80000000,
 798     (uint8_t *)
 799     "\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"
 800     "\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"
 801     "\x83\xe2\xf0" /* and */
 802     "\xff\xd2"     /* call *edx */
 803     "\x90\xf4",    /* nop halt */
 804   },
 805   {
 806     "test 80",
 807     "test 80: roundss",
 808     0, 3, 0, 9, 0x80000000,
 809     (uint8_t *)"\x66\x0f\x3a\x0a\xc0\x00"
 810     "\x90\x90"
 811     "\xf4",
 812   },
 813   {
 814     "test 81",
 815     "test 81: crc32",
 816     0, 3, 0, 8, 0x80000000,
 817     (uint8_t *)"\xf2\x0f\x38\xf1\xc8"
 818     "\x90\x90"
 819     "\xf4",
 820   },
 821   {
 822     "test 82",
 823     "test 82: SSE4 error 1",
 824     1, 4, 2, 8, 0x80000000,
 825     (uint8_t *)"\xf3\x0f\x3a\x0e\xd0\xc0\x90\xf4"
 826   },
 827   {
 828     "test 83",
 829     "test 83: SSE4 error 2",
 830     1, 2, 2, 8, 0x80000000,
 831     (uint8_t *)"\xf3\x0f\x38\x0f\xd0\xc0\x90\xf4"
 832   },
 833   {
 834     "test 84",
 835     "test 84: SSE4 error 3",
 836     1, 3, 1, 8, 0x80000000,
 837     (uint8_t *)"\x66\x0f\x38\x0f\xd0\xc0\x90\xf4"
 838   },
 839   {
 840     "test 85",
 841     "test 85: SSE4 error 4",
 842     1, 3, 1, 10, 0x80000000,
 843     (uint8_t *)"\xf2\x66\x0f\x3a\x0a\xc0\x00"
 844     "\x90\x90"
 845     "\xf4",
 846   },
 847   {
 848     "test 86",
 849     "test 86: bad SSE4 crc32",
 850     1, 3, 1, 9, 0x80000000,
 851     (uint8_t *)"\xf2\xf3\x0f\x38\xf1\xc8"
 852     "\x90\x90"
 853     "\xf4",
 854   },
 855   {
 856     "test 87",
 857     "test 87: bad NACLi_3BYTE instruction (SEGCS prefix)",
 858     1, 3, 1, 13, 0x80000000,
 859     (uint8_t *)"\x2e\x0f\x3a\x7d\xbb\xab\x00\x00\x00\x00"
 860     "\x90\x90"
 861     "\xf4",
 862   },
 863   {
 864     "test 88",
 865     "test 88: two-byte jump with prefix (bug reported by Mark Dowd)",
 866     1, 4, 1, 8, 0x80000000,
 867     (uint8_t *)"\x66\x0f\x84\x00\x00"
 868     "\x90\x90"
 869     "\xf4",
 870   },
 871
 872 };
 873
 874 static uint8_t *memdup(uint8_t *s, int len) {
 875   return memcpy(malloc(len), s, len);
 876 }
 877
 878 static void TestValidator(struct NCValTestCase *vtest) {
 879   struct NCValidatorState *vstate;
 880   uint8_t *byte0 = memdup(vtest->testbytes, vtest->testsize);
 881   int rc;
 882
 883   vstate = NCValidateInit(vtest->vaddr,
 884                           vtest->vaddr + vtest->testsize, 16);
 885   NCValidateSegment(byte0, (uint32_t)vtest->vaddr, vtest->testsize, vstate);
 886   free(byte0);
 887   rc = NCValidateFinish(vstate);
 888   do {
 889     if (vtest->sawfailure ^ vstate->stats.sawfailure) break;
 890     if (vtest->instructions != vstate->stats.instructions) break;
 891     if (vtest->illegalinst != vstate->stats.illegalinst) break;
 892     fprintf(stderr, "*** %s passed (%s)\n", vtest->name, vtest->description);
 893     NCValidateFreeState(&vstate);
 894     return;
 895   } while (0);
 896   Stats_Print(stderr, vstate);
 897   NCValidateFreeState(&vstate);
 898   fprintf(stderr, "*** %s failed (%s)\n", vtest->name, vtest->description);
 899   exit(-1);
 900 }
 901
 902 #define sizeofA(array)  (sizeof(array)/sizeof(array[0]))
 903 void ncvalidate_unittests() {
 904   size_t i;
 905
 906   for (i = 0; i < sizeofA(NCValTests); i++) {
 907     TestValidator(&NCValTests[i]);
 908   }
 909   fprintf(stderr, "\nAll tests passed.\n\n");
 910 }