1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
|
#!/usr/bin/env python3
"""End-to-end smoke test for the RPC server, in-process over a real unix socket.
~/ida-venv/bin/python tests/rpc_smoke.py --db <session_id>
Boots the TUI headless with --rpc on a temp socket, connects a JSONL client over
that socket (same loop), and exercises the raw + introspection primitives.
"""
import asyncio
import json
import os
import sys
import tempfile
sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
from idatui.app import IdaTui # noqa: E402
from idatui.client import DEFAULT_URL # noqa: E402
from idatui._sync import wait_for # noqa: E402
from textual.widgets import DataTable # noqa: E402
PASS = FAIL = 0
def check(name, cond, detail=""):
global PASS, FAIL
if cond:
PASS += 1
print(f" ok {name}")
else:
FAIL += 1
print(f" FAIL {name} {detail}")
class Conn:
"""Tiny JSONL client over a unix socket."""
def __init__(self, r, w):
self.r, self.w = r, w
self._id = 0
async def call(self, method, **params):
self._id += 1
self.w.write(json.dumps({"id": self._id, "method": method,
"params": params}).encode() + b"\n")
await self.w.drain()
line = await self.r.readline()
return json.loads(line.decode())
async def run(db):
sock = os.path.join(tempfile.gettempdir(), f"idatui-rpc-{os.getpid()}.sock")
url = os.environ.get("IDA_MCP_URL", DEFAULT_URL)
app = IdaTui(url=url, db=db, keepalive=False, rpc_path=sock)
async with app.run_test(size=(140, 44)) as pilot:
# boot: functions loaded + socket up
await wait_for(lambda: app.query_one("#func-table", DataTable).row_count > 0,
pilot.pause, 60)
await wait_for(lambda: os.path.exists(sock), pilot.pause, 20)
if app._func_index is not None and not app._func_index.complete:
app._func_index.load_all()
r, w = await asyncio.open_unix_connection(sock)
c = Conn(r, w)
resp = await c.call("ping")
check("ping returns proto", resp.get("result", {}).get("proto") == 1, str(resp))
resp = await c.call("functions", limit=400)
funcs = resp.get("result", [])
check("functions lists entries", isinstance(funcs, list) and len(funcs) > 0,
str(resp)[:120])
# a normally-named function (its name appears verbatim in its own decomp,
# unlike e.g. '.init_proc' which IDA renders as 'init_proc')
target = next((f for f in funcs if f["name"] == "main"),
next((f for f in funcs if f["name"].startswith("sub_")), funcs[0]))
resp = await c.call("state")
st = resp.get("result", {})
check("state has an active view", st.get("active") in ("decomp", "disasm", "hex"),
str(st)[:120])
# drive it like a user: goto a function by name via raw keys
keys = ["g"] + list(target["name"]) + ["enter"]
resp = await c.call("keys", keys=keys)
st = resp.get("result", {})
check("keys(goto) navigates to the function",
st.get("function", {}).get("name") == target["name"],
f"got {st.get('function')}")
resp = await c.call("view", lines=6)
v = resp.get("result", {})
check("view returns visible lines with a cursor",
isinstance(v.get("lines"), list) and any(l.get("cur") for l in v["lines"]),
str(v)[:120])
resp = await c.call("screen")
scr = resp.get("result", {})
check("screen returns a text grid",
isinstance(scr.get("text"), str) and target["name"] in scr["text"],
f"len={len(scr.get('text','')) if scr else 0}")
# raw text primitive into the goto input, then escape out
from textual.widgets import Input
await c.call("keys", keys=["g"])
await c.call("text", text="sub_", settle=False)
val = app.query_one("#goto", Input).value
check("text primitive types into the focused input", val == "sub_", f"val={val!r}")
await c.call("keys", keys=["escape"])
# --- semantic verbs ------------------------------------------------ #
resp = await c.call("goto", target=target["name"], delay_ms=0)
check("semantic goto lands on the function",
resp.get("result", {}).get("function", {}).get("name") == target["name"],
str(resp.get("result", {}).get("function")))
before = app._active
resp = await c.call("toggle_view")
check("toggle_view flips the active pane",
resp.get("result", {}).get("active") != before, f"still {before}")
await c.call("toggle_view") # flip back to a known state
# fast movement: cursor should advance a few lines
line0 = (await c.call("state"))["result"]["cursor"].get("line")
resp = await c.call("move", dir="down", n=4)
line1 = resp["result"]["cursor"].get("line")
check("move(down,4) advances the cursor",
isinstance(line0, int) and isinstance(line1, int) and line1 > line0,
f"{line0} -> {line1}")
# rename round-trip through the prompt-fill path (place cursor on the
# function's own name via view(), rename, verify, revert via the API)
v = (await c.call("view", lines=1))["result"]
line0_text = v["lines"][0]["text"] if v.get("lines") else ""
col = line0_text.find(target["name"])
if col >= 0:
await c.call("cursor", line=0, col=col + 1)
newname = f"rpc_{os.getpid()}"
await c.call("rename", name=newname, delay_ms=0)
got = app._func_index.by_addr(target["ea"])
check("semantic rename updates the function name",
got is not None and got.name == newname,
got.name if got else None)
app.program.client.call(
"rename", batch={"func": {"addr": hex(target["ea"]), "name": target["name"]}})
else:
check("found the function name to rename", False, repr(line0_text[:60]))
w.close()
print(f"\n{PASS} passed, {FAIL} failed")
return 1 if FAIL else 0
def main(argv):
db = None
it = iter(argv)
for a in it:
if a == "--db":
db = next(it)
return asyncio.run(run(db))
if __name__ == "__main__":
raise SystemExit(main(sys.argv[1:]))
|
