Adds support for reading 'v2' consent ui headers

2024-08-28 01:29:34 +10:00
parent fe2a6cabb4
commit fcdd67bb0f
36 changed files with 447 additions and 22 deletions
@@ -0,0 +1,96 @@
+using System;
+using Lithnet.CredentialProvider.Interop;
+using NUnit.Framework;
+
+namespace Lithnet.CredentialProvider.UnitTests
+{
+    public class V1HeaderTests
+    {
+        [SetUp]
+        public void Setup()
+        {
+            ConsentUIData.HeaderSize = ConsentUIData.v1HeaderSize;
+        }
+
+        [Test]
+        public void TestExe()
+        {
+            SafeHGlobalHandle p = Helpers.ReadFile($"Samples\\V1\\dump-consent-exe-x86.dat");
+
+            var d = new ConsentUIDataExe(p.ToIntPtr(), p.Size);
+
+            Assert.AreEqual(ConsentUIType.Exe, d.Type);
+            Assert.AreEqual(ConsentUIFlags.InWindowsDirectory | ConsentUIFlags.SecureDesktop | ConsentUIFlags.Unknown3, d.Flags);
+            Assert.AreEqual(2, d.SessionId);
+            Assert.AreEqual((IntPtr)0x0006056a, d.HWnd);
+            Assert.AreEqual((ConsentUIElevationType)6, d.ElevationType);
+            Assert.AreEqual(ConsentUIPromptType.Credentials, d.PromptType);
+            Assert.AreEqual("C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", d.ExecutablePath);
+            Assert.AreEqual("C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", d.Unknown1);
+            Assert.AreEqual("\"C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe\" ARGS1 ARGS2", d.CommandLine);
+            Assert.AreEqual("", d.Unknown2);
+        }
+
+        [Test]
+        public void TestMsi()
+        {
+            SafeHGlobalHandle p = Helpers.ReadFile($"Samples\\V1\\dump-consent-msi-x86.dat");
+
+            var d = new ConsentUIDataMsi(p.ToIntPtr(), p.Size);
+
+            Assert.AreEqual(ConsentUIType.Msi, d.Type);
+            Assert.AreEqual(ConsentUIFlags.InWindowsDirectory | ConsentUIFlags.SecureDesktop | ConsentUIFlags.AutoElevationOther, d.Flags);
+            Assert.AreEqual(2, d.SessionId);
+            Assert.AreEqual((IntPtr)0x000705bc, d.HWnd);
+            Assert.AreEqual((ConsentUIElevationType)5, d.ElevationType);
+            Assert.AreEqual(ConsentUIPromptType.Credentials, d.PromptType);
+            Assert.AreEqual("7-Zip 23.01", d.ProductName);
+            Assert.AreEqual(ConsentUIMsiAction.Install, d.Action);
+            Assert.AreEqual("C:\\Windows\\Installer\\26396d5.msi", d.ExecutionPath);
+            Assert.AreEqual("1033", d.Locale);
+            Assert.AreEqual("C:\\Users\\std\\Downloads\\7z2301.msi", d.OriginalMsi);
+            Assert.AreEqual("7-Zip 23.01", d.ProductName);
+            Assert.AreEqual("Igor Pavlov", d.Publisher);
+            Assert.AreEqual("23.01.00.0", d.Version);
+        }
+
+        [Test]
+        public void TestMsix()
+        {
+            SafeHGlobalHandle p = Helpers.ReadFile($"Samples\\V1\\dump-consent-msix-x86.dat");
+
+            var d = new ConsentUIDataMsix(p.ToIntPtr(), p.Size);
+
+            Assert.AreEqual(ConsentUIType.Msix, d.Type);
+            Assert.AreEqual( ConsentUIFlags.SecureDesktop | ConsentUIFlags.Unknown3, d.Flags);
+            Assert.AreEqual(2, d.SessionId);
+            Assert.AreEqual((IntPtr)0x0, d.HWnd);
+            Assert.AreEqual((ConsentUIElevationType)8, d.ElevationType);
+            Assert.AreEqual(ConsentUIPromptType.Credentials, d.PromptType);
+            Assert.AreEqual("\"C:\\Program Files\\WindowsApps\\Microsoft.MSIXPackagingTool_1.2023.807.0_x86__8wekyb3d8bbwe\\MsixPackageTool.exe\" ", d.CommandLine);
+            Assert.AreEqual("C:\\Program Files\\WindowsApps\\Microsoft.MSIXPackagingTool_1.2023.807.0_x86__8wekyb3d8bbwe\\MsixPackageTool.exe", d.ExecutablePath);
+            Assert.AreEqual("Microsoft.MSIXPackagingTool_8wekyb3d8bbwe!Msix.App", d.OtherName);
+            Assert.AreEqual("Microsoft.MSIXPackagingTool_8wekyb3d8bbwe", d.PackageName);
+        }
+
+        [Test]
+        public void TestCom()
+        {
+            SafeHGlobalHandle p = Helpers.ReadFile($"Samples\\V1\\dump-consent-com-x86.dat");
+
+            var d = new ConsentUIDataCom(p.ToIntPtr(), p.Size);
+
+            Assert.AreEqual(ConsentUIType.Com, d.Type);
+            Assert.AreEqual(ConsentUIFlags.SecureDesktop | ConsentUIFlags.AutoElevationOther | ConsentUIFlags.InWindowsDirectory, d.Flags);
+            Assert.AreEqual(2, d.SessionId);
+            Assert.AreEqual((IntPtr)0x000b0586, d.HWnd);
+            Assert.AreEqual((ConsentUIElevationType)4, d.ElevationType);
+            Assert.AreEqual(ConsentUIPromptType.Credentials, d.PromptType);
+            Assert.AreEqual(new Guid("{3ad05575-8857-4850-9277-11b85bdb8e09}"), d.ClsId);
+            Assert.AreEqual("C:\\Windows\\system32\\windows.storage.dll", d.ComComponentPath);
+            Assert.AreEqual("", d.ImageResourcePath);
+            Assert.AreEqual("File Operation", d.OperationType);
+            Assert.AreEqual("C:\\Windows\\Explorer.EXE", d.ProcessPath);
+        }
+    }
+}