mishegos
mishegos copied to clipboard
A differential fuzzer for x86 decoders
Bumps [src/worker/ghidra/sleigh-cmake](https://github.com/lifting-bits/sleigh) from `0474bbd` to `74838a3`. Commits 74838a3 CMake refactor (#105) 72d364a Update Ghidra HEAD to commit 03bd4b45d (#123) 755f925 Update Ghidra HEAD to commit aad60ecdd (#122) See full diff...
Bumps [src/worker/zydis/zydis](https://github.com/zyantific/zydis) from `871c40c` to `404e50b`. Commits 404e50b Doc: group important macros and refer to them c614111 CI: clone doxygen theme prior to building doc 9d6c82a CI: add automated documentation...
This should be do-able, especially after the changes in #1302. Just needs documentation and possibly some more small build system fixes.
Some additional targets that could use a worker implementation: - [ ] IDA - [ ] qemu's decoder - [x] LLVM's decoder (should be relatively close to Capstone) (#1641) -...
Right now, `mishegos` spits out every single cohort for every single candidate tried, even if every decoder agrees that the input is invalid. This results in extremely large outputs by...
It'd be nice to have some basic tests in the CI, probably using `mishegos`'s manual mode to feed some simple inputs in.
The following analyses are needed: - [x] `size-discrepancies`: Find all cohorts where all decoders succeed, but one or more disagree on the decoded instruction's size - [x] `destroy-xed`: Try to...
Something that we had planned to look into sooner or later is diffing against the behaviour observed from actual CPUs, in a [sandsifter](https://github.com/xoreaxeaxeax/sandsifter)-like fashion. Would that be beyond the scope...
Now that we have CI configured and automated submodule updates via Dependabot, it'd be interesting to hack together some kind of basic regression testing for our implemented workers. Something like...