Evan Sultanik

Confirm that contracts are created at the same address between clients. Will need to take into account synchronized clients somehow.

Better error handling when clients do not return HTTP 200

1

Currently, if a client returns an HTTP error for a JSON RPC call, things break. Handle this more gracefully.

Add support for emitting EVM traces. Integrate this feature into the differential tester to automatically compare the traces of all transactions.

Adds an example for instrumenting the DaeDaLus PDF parser.

Tainted control of `fseek` not properly tracked

1

```c int foo() { FILE* input = fopen("foo", "rb"); int taintedOffset = getc(input); fseek(input, taintedOffset, SEEK_SET); return getc(input); } ``` Currently, I believe the return value of `foo()` will only...

We currently have support on the database side for having multiple inputs. However, we need to: - [x] ~Add an additional database table to track multiple runs of the program....

Taint environment variables

1

Add an option to treat `__environ` as a taint source

Taint argv

1

Have an option to treat `argv` as a taint source

Uninstrumented functions

4

These are currently uninstrumented functions that we should probably support: - [x] `bcmp` - [x] `bindtextdomain` - [x] `dirname` - [x] `fgetc` - [x] `fseeko` - [x] `mbtowc` - [...

Uniquely taint EOF

1

Every time a program reads past the end of a file, return a special taint with a new label associated with that `EOF`.