Yusen Su

New Object domain

3

Introduce a new object domain based on DSA node and cache operation.

We can also improve the precisons if a given reference constraints is `p == NULL`. For instance, ```c int sz = int_nd(); __CRAB_assume(sz >= 0); __CRAB_assume(sz < 10); uint8_t *ptr...

Prototype mru

1

1. Prototype a simple update cache if the cache is empty. 2. Prototype basic operations: - `fold`: add three examples; - `expand`: add two examples.

A new abstract domain for the refinement of DSA. It keeps relational properties between the fields of memory objects shared in the same DSA node.

Giving a method to group region variables passed/returned between caller and callee based on the DSA intrinsics. The information is stored in the `callsite_info` class for further abstract operations of...

Angr reports an error state to explore C++ program with `unordered_map`

2

### Description Using Angr to explore programs including unordered_map may yield an error state, which is not what concrete execution follows. Cannot tell why Angr explores this function when the...

### Description 1. Observation (high level) [buf_test.tar.gz](https://github.com/angr/cle/files/14831571/buf_test.tar.gz) I tried to use angr's one feature to resolve the source level variable. I provided a source code as an example, a binary...

- Problem: ``` CRAB ERROR: Region::ref_store: type of value 6 (int32) is not compatible with region @V_39 (region(ref)) ``` In LLVM IR, there is a global object with initialization: ```...