1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
use yaxpeax_x86::real_mode::{InstDecoder};
#[test]
fn test_implied_memory_width() {
fn mem_size_of(data: &[u8]) -> Option<u8> {
let decoder = InstDecoder::default();
decoder.decode_slice(data).unwrap().mem_size().unwrap().bytes_size()
}
// test push, pop, call, and ret
assert_eq!(mem_size_of(&[0xc3]), Some(2));
assert_eq!(mem_size_of(&[0xe8, 0x11, 0x22, 0x33, 0x44]), Some(2));
assert_eq!(mem_size_of(&[0x50]), Some(2));
assert_eq!(mem_size_of(&[0x58]), Some(2));
assert_eq!(mem_size_of(&[0x66, 0x50]), Some(2));
assert_eq!(mem_size_of(&[0x66, 0x58]), Some(2));
assert_eq!(mem_size_of(&[0xff, 0xf0]), Some(2));
assert_eq!(mem_size_of(&[0x66, 0xff, 0xf0]), Some(4));
// unlike 64-bit mode, operand-size prefixed call and jump do have a different size: they read
// four bytes.
assert_eq!(mem_size_of(&[0x66, 0xff, 0x10]), Some(4));
assert_eq!(mem_size_of(&[0x66, 0xff, 0x20]), Some(4));
// pushf
assert_eq!(mem_size_of(&[0x9c]), Some(2));
// popf
assert_eq!(mem_size_of(&[0x9d]), Some(2));
// leave
assert_eq!(mem_size_of(&[0xc9]), Some(2));
// xlat
assert_eq!(mem_size_of(&[0xd7]), Some(1));
// push fs
assert_eq!(mem_size_of(&[0x0f, 0xa0]), Some(2));
// pop fs
assert_eq!(mem_size_of(&[0x0f, 0xa1]), Some(2));
// push gs
assert_eq!(mem_size_of(&[0x0f, 0xa8]), Some(2));
// pop gs
assert_eq!(mem_size_of(&[0x0f, 0xa9]), Some(2));
}
|
