mcgrady1

Hi, (1)I know, but some programs will use SSE, which will influence the taint and fuzzing result (2)You are right, so the xadd_m2r_xxx function may be wrong, can you check...

source coe: tag_t dst_tag = thread_ctx->vcpu.gpr[dst][1]; tag_t src_tag = tag_dir_getb(tag_dir, src); thread_ctx->vcpu.gpr[dst][1] = tag_combine(dst_tag, src_tag); tag_dir_setb(tag_dir, src, dst_tag); xadd instruction: Temporary = Source + Destination; Source = Destination; Destination =...