def test_is32bit_process():
p = Process()
with chdir("cuckoo/data/analyzer/windows"):
# Normally the user shouldn't be able to access the SYSTEM process.
with pytest.raises(CuckooError) as e:
p.is32bit(pid=4)
e.match("process access denied$")
def test_is32bit_process():
p = Process()
with chdir("cuckoo/data/analyzer/windows"):
# Normally the user shouldn't be able to access the SYSTEM process.
with pytest.raises(CuckooError) as e:
p.is32bit(pid=4)
e.match("process access denied$")
def test_is32bit_process():
p = Process()
with chdir("cuckoo/data/analyzer/windows"):
# Normally (i.e., when not Administrator) the user shouldn't be able
# to access the lsass.exe process.
with pytest.raises(CuckooError) as e:
p.is32bit(process_name="lsass.exe")
e.match("process access denied$")
def test_is32bit_path():
p = Process()
mzdos0 = os.path.abspath("tests/files/mzdos0")
icardres = os.path.abspath("tests/files/icardres.dll")
with chdir("cuckoo/data/analyzer/windows"):
# File not found.
with pytest.raises(CuckooError) as e:
p.is32bit(path="thisisnotafile")
e.match("File not found")
# No MZ header.
with pytest.raises(CuckooError) as e:
p.is32bit(path=__file__)
e.match("returned by is32bit")
e.match("Invalid DOS file")
# This is a MZ-DOS executable rather than a PE file.
assert p.is32bit(path=mzdos0) is True
# TODO Add a 32-bit PE executable.
# This is a 64-bit PE file.
assert p.is32bit(path=icardres) is False
def test_is32bit_path():
p = Process()
mzdos0 = os.path.abspath("tests/files/mzdos0")
icardres = os.path.abspath("tests/files/icardres.dll")
with chdir("cuckoo/data/analyzer/windows"):
# File not found.
with pytest.raises(CuckooError) as e:
p.is32bit(path="thisisnotafile")
e.match("File not found")
# No MZ header.
with pytest.raises(CuckooError) as e:
p.is32bit(path=__file__)
e.match("returned by is32bit")
e.match("Invalid DOS file")
# This is a MZ-DOS executable rather than a PE file.
assert p.is32bit(path=mzdos0) is True
# TODO Add a 32-bit PE executable.
# This is a 64-bit PE file.
assert p.is32bit(path=icardres) is False
