Haimeng Huang

13 papers Journal 8Unranked 5
YearRankTypeTitle / Venue / Authors
2026 J jnl
Microelectron. J.
Bo Yi, Junfeng Duan, Shengnan Zhu, Wenbo Luo, Junji Cheng, Haimeng Huang, Hongqiang Yang
2025 J jnl
IEEE Access
Yunteng Jiang, Zhentao Xiao, Zonghao Zhang, Junchen Zhang, Chenxing Wang, Wenjun Li, Haimeng Huang, Aynul Islam, Hongqiang Yang
2025 J jnl
Microelectron. J.
Haimeng Huang, Zhentao Xiao, Zonghao Zhang, Chenxing Wang, Hongqiang Yang
2023 conf
ASICON
Bo Yi, Haimeng Huang, Haoran Hu, Moufu Kong, Yilin Guo, Wenkun Shi, Junji Cheng, Hongqiang Yang
2023 J jnl
Microelectron. J.
Bo Yi, Yi Xu, LiTian Zheng, Junji Cheng, Haimeng Huang, Moufu Kong, Hongqiang Yang
2023 conf
ASICON
Zonghao Zhang, Xi Wang, Keqiang Ma, Siliang Wang, Chenxing Wang, Haoyang Zhou, Haimeng Huang, Junji Cheng, Bo Yi, Hongqiang Yang
2021 conf
ASICON
Bo Yi, Zheng Wu, Junji Cheng, Haimeng Huang, Moufu Kong, Hongqiang Yang
2021 conf
ASICON
Zheng Wu, Chao Xia, Bo Yi, Junji Cheng, Haimeng Huang, Moufu Kong, Hongqiang Yang, Wenkun Shi
2020 J jnl
IEEE Access
Junji Cheng, Jingjie Lin, Weizhen Chen, Shiying Wu, Haimeng Huang, Bo Yi
2020 J jnl
IEICE Electron. Express
Bo Yi, Yi Feng Peng, Qing Zhao, Moufu Kong, Junji Cheng, Haimeng Huang
2019 J jnl
IEEE Access
Haimeng Huang, Jun Huang, Huan Hu, Junji Cheng, Bo Yi
2019 J jnl
IEICE Electron. Express
Bo Yi, Hao Hu, Jia Lin, Junji Cheng, Haimeng Huang, Moufu Kong
2011 conf
ASICON
Haimeng Huang, Yongwei Wang, Xingbi Chen
tests/unit/test_decompile_scores.py
← Index tests/unit/test_decompile_scores.py python
"""Unit tests for bninja/analysis/scores.py — ObfuscationScores."""
import sys
import pytest
from unittest.mock import MagicMock

# Install binaryninja stubs before importing
from tests.unit.conftest_binja_stubs import (
    install_binja_stubs,
    HighLevelILOperation,
)
bn_mock = install_binja_stubs()

from redb.extractors.decompiler.bninja.analysis.scores import (
    ObfuscationScores,
    get_dominated_by,
    uses_mba,
)
import binaryninja.highlevelil as hlil_mod


# ============================================================================
# Helper: Mock HLIL instruction
# ============================================================================

class MockHLILInstruction(hlil_mod.HighLevelILInstruction):
    """Mock HLIL instruction with operation and operands."""
    def __init__(self, operation, operands=None):
        self.operation = operation
        self.operands = operands or []


class MockHLILBasicBlock:
    """Mock HLIL basic block for flattened score testing."""
    def __init__(self, incoming_edges=None, dominator_tree_children=None):
        self.incoming_edges = incoming_edges or []
        self.dominator_tree_children = dominator_tree_children or []


# ============================================================================
# 5a. ObfuscationScores
# ============================================================================


class TestFlattenedScore:
    def test_flattened_score_no_back_edges(self):
        """Linear CFG with no back edges -> score 0.0."""
        block = MockHLILBasicBlock(incoming_edges=[], dominator_tree_children=[])
        func = MagicMock()
        func.basic_blocks = [block]
        scores = ObfuscationScores(func)
        assert scores.flattened_score() == 0.0

    def test_flattened_score_with_loop(self):
        """CFG with a back edge -> score > 0.0."""
        block = MockHLILBasicBlock(dominator_tree_children=[])
        # Create a back edge: an incoming edge whose source is in the dominated set
        edge = MagicMock()
        edge.source = block  # source IS the dominator -> back edge
        block.incoming_edges = [edge]
        func = MagicMock()
        func.basic_blocks = [block]
        scores = ObfuscationScores(func)
        assert scores.flattened_score() > 0.0

    def test_flattened_score_fully_flat(self):
        """Flattened CFG: one block dominates all -> ratio close to 1.0."""
        children = [MockHLILBasicBlock() for _ in range(4)]
        root = MockHLILBasicBlock(dominator_tree_children=children)
        # Back edge from root incoming
        edge = MagicMock()
        edge.source = root
        root.incoming_edges = [edge]
        all_blocks = [root] + children
        func = MagicMock()
        func.basic_blocks = all_blocks
        scores = ObfuscationScores(func)
        assert scores.flattened_score() == pytest.approx(1.0)


class TestMBAScore:
    def test_mba_score_no_mixed_ops(self):
        """Instructions with only arithmetic -> score 0.0."""
        instr = MockHLILInstruction(HighLevelILOperation.HLIL_ADD, operands=[])
        func = MagicMock()
        func.instructions = [instr]
        scores = ObfuscationScores(func)
        assert scores.MBA_score() == 0.0

    def test_mba_score_mixed_ops(self):
        """Instructions with arithmetic + logic -> score > 0.0."""
        inner_logic = MockHLILInstruction(HighLevelILOperation.HLIL_XOR, operands=[])
        outer_arith = MockHLILInstruction(
            HighLevelILOperation.HLIL_ADD, operands=[inner_logic]
        )
        func = MagicMock()
        func.instructions = [outer_arith]
        scores = ObfuscationScores(func)
        assert scores.MBA_score() > 0.0

    def test_mba_score_all_mixed(self):
        """Every instruction has both -> score 1.0."""
        inner_logic = MockHLILInstruction(HighLevelILOperation.HLIL_NOT, operands=[])
        outer_arith = MockHLILInstruction(
            HighLevelILOperation.HLIL_SUB, operands=[inner_logic]
        )
        func = MagicMock()
        func.instructions = [outer_arith]
        scores = ObfuscationScores(func)
        assert scores.MBA_score() == 1.0


class TestGetDominatedBy:
    def test_get_dominated_by(self):
        child1 = MockHLILBasicBlock(dominator_tree_children=[])
        child2 = MockHLILBasicBlock(dominator_tree_children=[])
        root = MockHLILBasicBlock(dominator_tree_children=[child1, child2])
        result = get_dominated_by(root)
        assert root in result
        assert child1 in result
        assert child2 in result
        assert len(result) == 3


class TestUsesMBA:
    def test_uses_mba_arithmetic_only(self):
        instr = MockHLILInstruction(HighLevelILOperation.HLIL_ADD, operands=[])
        assert uses_mba(instr) is False

    def test_uses_mba_logic_only(self):
        instr = MockHLILInstruction(HighLevelILOperation.HLIL_XOR, operands=[])
        assert uses_mba(instr) is False

    def test_uses_mba_mixed(self):
        inner = MockHLILInstruction(HighLevelILOperation.HLIL_AND, operands=[])
        outer = MockHLILInstruction(HighLevelILOperation.HLIL_ADD, operands=[inner])
        assert uses_mba(outer) is True