Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A Chip-8 emulator written in JavaScript (Node.js).
Chip-8 is a simple, interpreted, programming language which was first used on some do-it-yourself computer systems in the late 1970s and early 1980s.
Chip8.js is an ongoing project to write a Chip-8 emulator in JavaScript. The main motivation is to learn lower level programming concepts, detailed here, and to increase familiarity with the Node.js environment.
Here are some of the concepts I learned while writing this program:
&
), OR (|
), XOR (^
), left shift (<<
), right shift (>>
) and how to use them for masking, setting, and testing valuesAnd here are some articles I wrote based on those concepts:
This guide assumes you already have Node.js and Yarn installed.
You can add the module directly from the chip8js npm package.
yarn add chip8js
# npm i --save chip8js
And require the RomBuffer
and CPU
classes.
// index.js
const { RomBuffer, CPU } = require('chip8js')
Or you can clone the repo. The only dependency of Chip8.js is jest for testing. Run yarn
to install.
git clone git@github.com:taniarascia/chip8.git
cd chip8
yarn
Chip-8 compatible ROMs can be saved in the roms/
directory. A copy of Connect 4 is shipped with Chip8.js (at roms/CONNECT4
) for example and testing purposes.
Create a ROM buffer of a ROM and load the data into the CPU. Execute the program.
yarn start roms/<ROM>
View a 16-bit hex dump of a ROM. (View more information on bits, bytes, bases, and hex dumps).
yarn hexdump roms/<ROM>
The output will look something like this (using CONNECT4
as an example).
000000 121a 434f 4e4e 4543 5434 2062 7920 4461
000010 7669 6420 5749 4e54 4552 a2bb f665 a2b4
000020 f655 6900 6801 6b00 6d0f 6e1f a2a5 600d
000030 6132 6200 d02f d12f 720f 321e 1234 d021
...
In progress.
The unit tests for Chip8.js use the Jest testing framework. You can run all test suites with or without displaying coverage.
# Run test suites
yarn test
# Run test suites and view coverage
yarn test --coverage
Chip8.js has two suites of unit tests:
The instruction tests cover the INSTRUCTION_SET
found in constants/instructionSet.js
. Each instruction has:
key
: for internal useid
: for a unique namename
: for the type of instruction)mask
: to filter out arguments from instruction signifiers)pattern
: to match the mask to the specific instruction patternarguments
, each of which contain:
mask
: to filter the nibble(s) to argumentsshift
: to shift it by locationtype
: to signify the type of argument// constants/instructionSet.js
{
key: 6,
id: 'SE_VX_NN',
name: 'SE',
mask: 0xf000,
pattern: 0x3000,
arguments: [{ mask: 0x0f00, shift: 8, type: 'R' }, { mask: 0x00ff, shift: 0, type: 'NN' }],
}
Each unit test checks an opcode to an instruction and tests:
id
to ensure the correct instruction is running for the mask/pattern// tests/instructions.test.js
test('test instruction 06: 3xkk - SE Vx, byte', () => {
expect(Disassembler.disassemble(0x3abb).instruction).toHaveProperty('id', 'SE_VX_NN')
expect(Disassembler.disassemble(0x3abb).args).toHaveLength(2)
expect(Disassembler.disassemble(0x3abb).args[0]).toBe(0xa)
expect(Disassembler.disassemble(0x3abb).args[1]).toBe(0xbb)
})
There are 35 instruction tests for 35 opcodes (the first instruction, CLS
, is no longer implemented).
The CPU decodes the opcode and returns the instruction object from constants/instructionSet.js
. Each instruction performs a specific, unique action in the case
. The CPU tests test the state of the CPU after an executing an instruction.
In the below example, the instruction is skipping an instruction if Vx === kk
, otherwise it's going to the next instruction as usual.
// classes/CPU.js
case 'SE_VX_NN':
// Skip next instruction if Vx = kk.
if (this.registers[args[0]] === args[1]) {
this._skipInstruction()
} else {
this._nextInstruction()
}
break
Each CPU test:
RomBuffer
containing the data of a single opcodestep
methodIn this example, the instruction can either be skipped or not skipped depending on the arguments, and both cases are tested.
// tests/cpu.test.js
test('test cpu 06: 3xkk - SE Vx, byte', () => {
cpu.load({ data: [0x3abb] })
cpu.step()
expect(cpu.PC).toBe(0x202)
cpu.load({ data: [0x3abb] })
cpu.registers[0xa] = 0xbb
cpu.step()
expect(cpu.PC).toBe(0x204)
})
I'm Tania Rascia. I write articles and tutorials about programming.
The code is open source and available under the MIT License.
FAQs
A Chip-8 emulator written in JavaScript (for Node.js and the web).
The npm package chip8js receives a total of 2 weekly downloads. As such, chip8js popularity was classified as not popular.
We found that chip8js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.