test-tracer.py

#!/usr/bin/env python
from pwn import *
import random
import os

process_path = './build-river-tools/bin/river.tracer'
test_lib_path = '/home/alex/build/lib/libhttp-parser.so'
max_tests = 500
max_len = 1024

error_messages = ["Disassembling unknown instruction", "Translating unknown instruction"]

execution_log = 'execution.log'

def find_text_in_file(text, filename):
    if text in open(filename).read():
        return True
    return False


def generate_test():
    len = random.randint(1, max_len)
    return ''.join(os.urandom(1) for i in range(len))

if __name__ == "__main__":
    current_test = 0
    while current_test < max_tests:
        tracer_process_args = [process_path, '--annotated', '--z3', '-p', test_lib_path, '-o', 'trace.simple.out.' + str(current_test)]

        payload = generate_test()
        print("Send payload [%d] of len: [%d]" % (current_test, len(payload)))

        f = open("input." + str(current_test), 'wb')
        f.write(payload)
        f.close()

        tracer = process(tracer_process_args)
        tracer.send(payload)

        tracer.stdin.close()
        tracer.recvall()

        tracer.close()
        ## check if unk instruction was found in executin log
        for e in error_messages:
            if find_text_in_file(e, execution_log):
                print("Obtained error for payload: [%s] in test: [%d]" % (payload, current_test))
                break
        os.rename(execution_log, 'execution.log.' + str(current_test))
        current_test += 1