chopper

chopper copied to clipboard

CVE 2014 now crashes

5

```bash /data/klee-slicing/klee-build/bin/klee --libc=uclibc --search=dfs --skip-functions=_asn1_get_octet_string:1092,asn1_delete_structure:1374 --no-output test.bc 32 [..] klee: /data/klee-slicing/klee/lib/Core/Executor.cpp:4526: void klee::Executor::onRecoveryStateWrite(klee::ExecutionState&, klee::ref, const klee::MemoryObject*, klee::ref, klee::ref): Assertion `isa(address)' failed. 0 klee 0x0000000001030c72 llvm::sys::PrintStackTrace(_IO_FILE*) + 50 1 klee 0x00000000010304cc...

andreamattavelli

- 88b2a38 fixes the reduced `small.c` breaking example from https://gist.github.com/jordr/55817398f88255dedfe206dd8337dba1 - 1eb3f6f adds `small.c` as a unit test at `test/Slicing/field-sensitivity-hetero.c`. Without https://github.com/davidtr1037/chopper/commit/88b2a38fd85b32f7ee8eb5d27951273dcaecba61, this unit test fails - this does not...

jordr

"Bad signature" LLVM assert raised when replacing calls with wrappers

2

I have had this LLVM assert raised on the `bc` benchmark on several functions, on several functions, such as prog_char and some floating point functions. I get different errors, sometimes...

jordr

Running vanilla Chopper on the `is_lower` benchmark from KLEE: ```c /* * First KLEE tutorial: testing a small function */ #include int my_islower(int x) { if (x >= 'a' &&...

jordr

This is on the `bc` benchmark again. Unfortunately, I was not able to isolate a list of skipped functions that triggers it on vanilla Chopper, so reproducibility is bad for...

jordr

Running Chopper on the `bc` benchmark without any skip instructions yields: ```console $ kleegacy -libc=uclibc -simplify-sym-indices -search=nurs:covnew -split-search -output-module bc.bc ... KLEE: WARNING ONCE: calling external: __syscall_rt_sigaction(2, 94287618746464, 94287622407168, 8)...

jordr

make error

1

I have encountered the following error during the installation process and how can I fix it? > sunghyun@ubuntu:~/chopper/klee_build$ make [ 9%] Built target kleeAnalysis [ 21%] Built target kleaverExpr [...

everpall

Port to LLVM 3.8

1

There exists experimental support for Klee on LLVM 3.8.

roachspray

Optimization: avoid expensive slicing when everything is concrete

2

andreamattavelli

Currently we dump many interesting things. Unfortunately, on large applications this leads to huge files: ```bash andrea@ruchill$ ll -h coreutils-6.10/obj-llvm/src/klee-last/sa.log -rw-rw-r-- 1 andrea andrea 3.4M Aug 14 09:23 coreutils-6.10/obj-llvm/src/klee-last/sa.log ```

andreamattavelli