#include #include #include #include #include "util.h" int main(int argc, char** argv) { int result = 0; YR_DEBUG_INITIALIZE(); YR_DEBUG_FPRINTF(1, stderr, "+ %s() { // in %s\n", __FUNCTION__, argv[0]); init_top_srcdir(); yr_initialize(); assert_true_rule_file( "import \"dotnet\" \ rule test { \ condition: \ not dotnet.is_dotnet \ }", "tests/data/tiny"); assert_true_rule_file( "import \"dotnet\" \ rule test { \ condition: \ dotnet.is_dotnet and \ dotnet.assembly.name == \"hpjsoaputility.Sv.resources\" \ }", "tests/data/" "0ca09bde7602769120fadc4f7a4147347a7a97271370583586c9e587fd396171"); assert_true_rule_file( "import \"dotnet\" \ rule test { \ condition: \ dotnet.is_dotnet and \ dotnet.number_of_resources == 1 and \ dotnet.resources[0].offset == 724 and \ dotnet.resources[0].length == 180 and \ dotnet.resources[0].name == \"hpjsoaputility.XmlStreamSoapExtension.pt.resources\" \ }", "tests/data/" "0ca09bde7602769120fadc4f7a4147347a7a97271370583586c9e587fd396171"); assert_true_rule_file( "import \"dotnet\" \ rule test { \ condition: \ dotnet.is_dotnet and \ dotnet.number_of_guids == 1 and \ dotnet.guids[0] == \"3764d539-e21a-4366-bc7c-b56fa67efbb0\" \ }", "tests/data/" "0ca09bde7602769120fadc4f7a4147347a7a97271370583586c9e587fd396171"); assert_true_rule_file( "import \"dotnet\" \ rule test { \ condition: \ dotnet.is_dotnet and \ dotnet.number_of_streams == 5 and \ dotnet.streams[0].name == \"#~\" and \ dotnet.streams[1].name == \"#Strings\" and \ dotnet.streams[2].name == \"#US\" and \ dotnet.streams[3].name == \"#GUID\" and \ dotnet.streams[4].name == \"#Blob\" \ }", "tests/data/" "0ca09bde7602769120fadc4f7a4147347a7a97271370583586c9e587fd396171"); assert_true_rule_file( "import \"dotnet\" \ rule test { \ condition: \ dotnet.is_dotnet and \ dotnet.module_name == \"hpjsoaputility.Sv.resources.dll\" and \ dotnet.version == \"v2.0.50727\" \ }", "tests/data/" "0ca09bde7602769120fadc4f7a4147347a7a97271370583586c9e587fd396171"); assert_true_rule_file( "import \"dotnet\" \ rule test { \ condition: \ dotnet.classes[0].fullname == \"Autodesk.AutoCAD.Internal.Windows.MenuServices\" and \ dotnet.classes[0].name == \"MenuServices\" and \ dotnet.classes[0].namespace == \"Autodesk.AutoCAD.Internal.Windows\" and \ dotnet.classes[0].visibility == \"public\" and \ dotnet.classes[0].type == \"class\" and \ dotnet.classes[0].abstract and \ dotnet.classes[0].sealed and \ dotnet.classes[0].number_of_generic_parameters == 0 and \ dotnet.classes[0].number_of_base_types == 1 and \ dotnet.classes[0].base_types[0] == \"System.Object\" and \ dotnet.classes[0].number_of_methods == 20 and \ dotnet.classes[0].methods[0].name == \"Initialize\" and \ dotnet.classes[0].methods[0].visibility == \"public\" and \ dotnet.classes[0].methods[0].static and \ not dotnet.classes[0].methods[0].virtual and \ not dotnet.classes[0].methods[0].final and \ dotnet.classes[0].methods[0].return_type == \"void\" and \ dotnet.classes[0].methods[0].parameters[0].name == \"productName\" and \ dotnet.classes[0].methods[0].parameters[0].type == \"string\" and \ dotnet.classes[0].methods[0].parameters[1].name == \"maxRecentFiles\" and \ dotnet.classes[0].methods[0].parameters[1].type == \"int\" and \ dotnet.classes[0].methods[0].number_of_generic_parameters == 0 and \ dotnet.classes[156].fullname == \"Autodesk.AutoCAD.Ribbon.Point3dDoubleToStringConverter\" and \ dotnet.classes[156].name == \"Point3dDoubleToStringConverter\" and \ dotnet.classes[156].namespace == \"Autodesk.AutoCAD.Ribbon\" and \ dotnet.classes[156].number_of_base_types == 2 and \ dotnet.classes[156].base_types[0] == \"System.Object\" and \ dotnet.classes[156].base_types[1] == \"System.Windows.Data.IValueConverter\" and \ dotnet.classes[156].number_of_methods == 3 and \ dotnet.classes[156].methods[0].name == \"Convert\" and \ dotnet.classes[156].methods[0].return_type == \"object\" and \ dotnet.classes[156].methods[0].number_of_parameters == 4 and \ dotnet.classes[156].methods[0].parameters[0].name == \"value\" and \ dotnet.classes[156].methods[0].parameters[0].type == \"object\" and \ dotnet.classes[156].methods[0].parameters[1].name == \"targetType\" and \ dotnet.classes[156].methods[0].parameters[1].type == \"System.Type\" and \ dotnet.classes[156].methods[0].parameters[2].name == \"parameter\" and \ dotnet.classes[156].methods[0].parameters[2].type == \"object\" and \ dotnet.classes[156].methods[0].parameters[3].name == \"culture\" and \ dotnet.classes[156].methods[0].parameters[3].type == \"System.Globalization.CultureInfo\" \ }", "tests/data/" "756684f4017ba7e931a26724ae61606b16b5f8cc84ed38a260a34e50c5016f59"); assert_false_rule( "import \"dotnet\" \ rule test { \ condition: \ dotnet.version == \"v4.0.30319\" \ }", "tests/data/" "bad_dotnet_pe"); yr_finalize(); YR_DEBUG_FPRINTF( 1, stderr, "} = %d // %s() in %s\n", result, __FUNCTION__, argv[0]); return result; }