nefarius
a491bbd3f8
Fix process-name ownership and module lookup outputs, add explicit SPKI hashing and bounded chain access, and improve WDM integration. Deprecate superseded entry points with migration guidance and align branch code and tests with the library style.
95 lines
3.4 KiB
Python
95 lines
3.4 KiB
Python
"""Compile actual public headers and verify MSVC C4996 migration diagnostics."""
|
|
|
|
import argparse
|
|
import os
|
|
from pathlib import Path
|
|
import subprocess
|
|
import tempfile
|
|
|
|
parser = argparse.ArgumentParser(description=__doc__)
|
|
parser.add_argument("--arch", choices=["x64", "ARM64"], default="x64")
|
|
args = parser.parse_args()
|
|
root = Path(__file__).resolve().parents[1]
|
|
vc = Path(os.environ["VCToolsInstallDir"])
|
|
kit = Path(os.environ["WindowsSdkDir"]) / "Include" / os.environ["WindowsSDKVersion"].strip("\\/")
|
|
compiler = vc / "bin/Hostx64" / args.arch.lower() / "cl.exe"
|
|
architecture = ["/D_AMD64_", "/D_AMD64", "/Gz"] if args.arch == "x64" else ["/D_ARM64_", "/DARM64"]
|
|
common = [
|
|
"/nologo",
|
|
"/c",
|
|
"/kernel",
|
|
"/W4",
|
|
"/WX",
|
|
"/we4996",
|
|
"/D_WIN64",
|
|
"/DWINNT=1",
|
|
"/DNTDDI_VERSION=0x0A000008",
|
|
"/D_WIN32_WINNT=0x0A00",
|
|
*architecture,
|
|
"/I" + str(vc / "include"),
|
|
"/I" + str(kit / "km"),
|
|
"/I" + str(kit / "shared"),
|
|
"/I" + str(kit / "ucrt"),
|
|
"/I" + str(root / "include"),
|
|
]
|
|
old = {
|
|
"DomitoGetPortableExecutableDigestKind": "DomitoGetPortableExecutableDigestKindEx",
|
|
"DomitoCalculatePortableExecutableDigest": "DomitoCalculatePortableExecutableDigestEx",
|
|
"DomitoValidateFileLegacyMode": "DomitoValidateFileLegacyModeEx",
|
|
"DomitoGetProcessImageName": "DomitoGetProcessImageNameEx",
|
|
}
|
|
modern = [
|
|
*old.values(),
|
|
"DomitoFreePortableExecutableDigest",
|
|
"DomitoFreeProcessImageName",
|
|
"DomitoValidateFileObjectEx",
|
|
"DomitoValidateFileHandleEx",
|
|
"DomitoValidateFilePathEx",
|
|
"DomitoGetCiChainView",
|
|
"DomitoGetCertificatePublisherName",
|
|
"DomitoFindModuleBaseAddress",
|
|
"DomitoFindExportedFunctionAddress",
|
|
"DomitoReadFile",
|
|
"DomitoReadFileAt",
|
|
"CiValidateFileObject",
|
|
]
|
|
prefix = "#include <ntifs.h>\n#include <ntintsafe.h>\n#include <ntimage.h>\n#include <bcrypt.h>\n#include <Domito.h>\n"
|
|
checks = 0
|
|
with tempfile.TemporaryDirectory(prefix="domito-deprecation-") as temp:
|
|
build = Path(temp)
|
|
for language in ["c", "cpp"]:
|
|
for index, (name, replacement) in enumerate([("modern", None), *old.items()]):
|
|
source = build / (f"check-{index}." + language)
|
|
refs = modern if replacement is None else [name]
|
|
source.write_text(
|
|
prefix
|
|
+ "void Check(void) {\n"
|
|
+ "".join(f" (void)&{ref};\n" for ref in refs)
|
|
+ "}\n"
|
|
)
|
|
result = subprocess.run(
|
|
[
|
|
str(compiler),
|
|
*common,
|
|
"/TC" if language == "c" else "/TP",
|
|
"/Fo" + str(build / "check.obj"),
|
|
str(source),
|
|
],
|
|
text=True,
|
|
capture_output=True,
|
|
)
|
|
output = result.stdout + result.stderr
|
|
if replacement is None:
|
|
assert result.returncode == 0, output
|
|
else:
|
|
assert (
|
|
result.returncode != 0
|
|
and "C4996" in output
|
|
and name in output
|
|
and replacement in output
|
|
), output
|
|
errors = [line for line in output.splitlines() if "error C" in line]
|
|
assert errors and all("C4996" in line for line in errors), output
|
|
checks += 1
|
|
print(f"PASS: {checks} {args.arch} C/C++ public-header deprecation checks")
|