dwarfcore.detectors.heap_oob module

class dwarfcore.detectors.heap_oob.Alloc(addr: 'int', size: 'int')

Bases: object

Parameters
  • addr (int) –

  • size (int) –

Return type

None

addr: int
size: int
class dwarfcore.detectors.heap_oob.ConcreteHeapOOB(dwarfcore: dwarfcore.dwarfcore.DwarfCore, m: manticore.native.manticore.Manticore, fast: bool = True, underconstrained: bool = False)

Bases: dwarfcore.plugins.heap_common.TrackHeapInformation

Plugin to detect out-of-bounds memory access in the heap.

Parameters
  • dwarfcore (DwarfCore) –

  • m (Manticore) –

  • fast (bool) –

  • underconstrained (bool) –

MCORE_TESTCASE_LIST: Final[str] = 'ConcreteHeapOOB_testcases'
check_mem_access(state: manticore.native.state.State, address: Union[manticore.core.smtlib.expression.Expression, int], size: int, kind: dwarfcore.plugins.under_constrained_symex.errors.AccessKind)
Parameters
get_new_taint() str
Return type

str

static intercept_alloc_after(state: manticore.native.state.State) None
Parameters

state (manticore.native.state.State) –

Return type

None

static intercept_malloc(state: manticore.native.state.State) None
Parameters

state (manticore.native.state.State) –

Return type

None

static intercept_new(state: manticore.native.state.State) None
Parameters

state (manticore.native.state.State) –

Return type

None

manticore
property name: str
record_testcase(state: manticore.native.state.State, message: str, cond: Optional[manticore.core.smtlib.expression.Expression] = None)
Parameters
  • state (manticore.native.state.State) –

  • message (str) –

  • cond (Optional[manticore.core.smtlib.expression.Expression]) –

property results: List[mate_common.models.integration.ReachingTestCase]

Any test case results found during execution.

will_read_memory_callback(state: manticore.native.state.State, address, size)
Parameters

state (manticore.native.state.State) –

will_write_memory_callback(state: manticore.native.state.State, address, _value, size)
Parameters

state (manticore.native.state.State) –

dwarfcore.detectors.heap_oob.get_heap_oob_plugin(state: manticore.native.state.State)
Parameters

state (manticore.native.state.State) –