Merge pull request #97 from imbillow/ida750

Add IDA 7.[4-5] *.idb and *.i64 and some fix

Author: XVilka

tests/data/v7.4/x32/kernel32.idb

@@ -112,6 +112,7 @@ def rundebug(request):
     750: "v7.5",
 }
 DefaultKern32Specs = [
+    (500, 32, None),
     (630, 32, None),
     (630, 64, None),
     (640, 32, None),
@@ -132,6 +133,10 @@ def rundebug(request):
     (720, 64, None),
     (730, 32, None),
     (730, 64, None),
+    (740, 32, None),
+    (740, 64, None),
+    (750, 32, None),
+    (750, 64, None),
 ]
 
 

tests/data/v7.4/x64/kernel32.i64

@@ -1,4 +1,5 @@
 import re
+import sys
 
 import idb.analysis
 from fixtures import *
@@ -299,6 +300,7 @@ def test_xrefs(kernel32_idb, version, bitness, expected):
     )
 
 
+@pytest.mark.skipif(six.PY2, reason="it consumes too much memory")
 @kern32_test()
 def test_fixups(kernel32_idb, version, bitness, expected):
     fixups = idb.analysis.Fixups(kernel32_idb).fixups

tests/data/v7.5/x32/kernel32.idb

@@ -556,19 +556,17 @@ def test_get_mnem(kernel32_idb, version, bitness, expected):
 
 @kern32_test()
 def test_functions(kernel32_idb, version, bitness, expected):
-    if version <= 500:
-        return
-
     api = idb.IDAPython(kernel32_idb)
 
     funcs = api.idautils.Functions()
     # exact number of detected functions varies by IDA version,
     # but the first and last addresses should remain constant.
     assert funcs[0] == 0x68901010
-    assert funcs[-1] == 0x689BD410
+    assert funcs[-1] == 0x689BD410 if version > 500 else 0x689CD6BA
 
     # this is a function chunk. should not be reported.
-    assert 0x689018E5 not in funcs
+    if version > 500:
+        assert 0x689018E5 not in funcs
 
 
 @kern32_test()

tests/data/v7.5/x64/kernel32.i64

@@ -22,16 +22,16 @@ def test_valobj(kernel32_idb, version, bitness, expected):
     # Out[29]: 'Z:\\home\\user\\Downloads\\kernel32\\kernel32.dll\x00'
     root = idb.netnode.Netnode(kernel32_idb, ROOT_NODEID)
     assert root.value_exists() is True
-    if version > 500:
-        assert root.valobj().endswith(b"kernel32.dll\x00")
-        assert root.valstr().endswith("kernel32.dll")
-    else:
+    if version >= 740 or version == 500:
         assert root.valobj().endswith(
             b"ba1bc09b7bb290656582b4e4d896105caf00825b557ce45621e76741cd5dc262\x00"
         )
         assert root.valstr().endswith(
             "ba1bc09b7bb290656582b4e4d896105caf00825b557ce45621e76741cd5dc262"
         )
+    else:
+        assert root.valobj().endswith(b"kernel32.dll\x00")
+        assert root.valstr().endswith("kernel32.dll")
 
 
 @kern32_test(
@@ -72,7 +72,7 @@ def test_alts(kernel32_idb, version, bitness, expected):
             uint(-1),
         ]
     else:
-        alts == [
+        assert alts == [
             uint(-5),
             uint(-4),
             uint(-3),