testing code for compliance. agenda appverifier 3.1 microsoft windows server 2003 r2 platform sdk...

Testing Code for ComplianceTesting Code for Compliance

Agenda

• AppVerifier 3.1• Microsoft Windows Server 2003 R2

Platform SDK• Command-line tools• Third-party tools

AppVerifier 3.1

• Identifies potential compatibility, stability, and security issues

• Is stand-alone• Contains a collection of tests • Has UAC Predictor plug-in• Provides guidance for fixes• Requires administrator privileges

AppVerifier 3.1AppVerifier 3.1

Agenda

• AppVerifier 3.1• Windows Server 2003 R2

Platform SDK• Command-line tools• Third-party tools

Windows Server 2003 R2 Platform SDK

• Contains tools developers can use for:– Cryptography– Debugging– File management– Performance– Resources– Testing

• Can be used to develop 32- and 64-bit applications

Orca

• Part of Windows Server 2003 R2 Platform SDK

• Microsoft Windows Installer table editor• Creates and edits Windows Installer

packages• Requires administrator privileges

OrcaOrca

Agenda

• AppVerifier 3.1• Windows Server 2003 R2 Platform

SDK• Command-line tools• Third-party tools

SignTool

• Part of Windows Server 2003 R2 Platform SDK

• Command-line tool• Digitally signs files• Verifies signatures• Time stamps files

signtool sign /a MyFile.exe

RegDump

• Dumps contents of registry to a file• Use with RegDiff to ensure the

registry has not changed

Regdump HKLM > reg.txt

RegDiff

• Generates a log of differences section by section

Regdiff reg1.txt reg2.txt

Restart Manager Tool

• Inject shutdown messages

• The application’s process ID is dwPID • Forces the application to shut down

and restart.

Rmtool.exe –p dwPID –S –R

ThreadHijacker

• Injects crashes– Pauses thread– Injects binary data– Sets instruction pointer– Resumes thread

• Need to ensure Windows Error Reporting occurs

Threadhijacker.exe /ui /crash:av /process:<process_name>”

Agenda

• AppVerifier 3.1• Windows Server 2003 R2 Platform

SDK• Command-line tools• Third-party tools

Resource Hacker 3.4

• Freeware tool• Explore resources for application

executables• Resource script compiler and

decompiler

Test Cases

Machine Setup and ConfigurationMachine Setup and Configuration

Normal OperationsNormal Operations

SecuritySecurity and and

CompatibilityCompatibilityReliabilityReliability

Install Install and and

UninstallUninstall

Summary

• AppVerifier 3.1• Windows Server 2003 R2

Platform SDK• Command-line tools• Third-party tools

Additional Resources

• AppVerifier 3.1http://www.microsoft.com/technet/prodtechnol/windows/appcompatibility/appverifier.mspx

• Windows Server 2003 R2 Platform SDKhttp://www.microsoft.com/downloads/details.aspx?familyid=484269E2-3B89-47E3-8EB7-1F2BE6D7123A&displaylang=en

• Resource Hackerhttp://www.download.com/3000-2352-10178588.html