angr

angr copied to clipboard

If num_find is zero attempt to explore all possible states

4

I wanted to explore all possible paths (i.e. run `explore()` until the active stash is empty). The only(?) way to do that right now seems to be to set `num_find`...

nmeum

networkx.exception.NodeNotFound: source node not in graph

1

### Description Getting the following trace when running backwards slicing from function "HAL_I2C_Master_Transmit_IT" to funtion "HAL_I2C_EV_IRQHandler" in the attached binary [F446_I2C_TwoBoards_ComIT.zip](https://github.com/user-attachments/files/17185673/F446_I2C_TwoBoards_ComIT.zip) ``` File "\angr_core.py", line 1083, in handle_first_access bs =...

s8maschi

### Description When running angr in tracing mode I get a segfault for my trivial code on arm. gdb shows this after compiling angr_native with DEBUG, ``` Thread 1 "python3"...

Phasip

### Description Binary `mips-ncc` (cbf44041a638581fc0de3760b766cc7a10b9d4345c494c975476224b58fc014a), function `doEventInternal` (0x497830), decompilation fails with the following exception: `assert len(vvars)

ltfish

TestJumpTableResolverCallTables should use precompiled binaries instead of runtime compilation

1

### Description Currently, in test_jumptables.py we compile test binaries from C source as part of each test, skipping the test in the case that a working compiler can't be run....

twizmwazin

Replace pycparser and CppHeaderParser libraries with libclang

7

### Description We use two different libraries for parsing C/C++ code, mostly for type information. One of them, CppHeaderParser, has been unmaintained for 8 years now. We should replace these...

twizmwazin

about usage of the feature ReachingDefinitions engine

9

hi there! I've read the post [A reaching definition engine for binary analysis built-in in angr](https://degrigis.github.io/posts/angr_rd/), and finished the experiments of the ASU class [CSE545 Guest Lecture: Binary Analysis](https://www.youtube.com/watch?v=4SMRnpuqN6E). everything...

aaaddress1

### Description angr fails to resolve the jump table indirect jump at 0x403bc8 (function 0x403b40) of the attached binary. [a71a3c3b922705cb5e2d8aa9c74f5c73c47fb27f10b1327eb2bb054d99a14397.zip](https://github.com/user-attachments/files/17078210/a71a3c3b922705cb5e2d8aa9c74f5c73c47fb27f10b1327eb2bb054d99a14397.zip) ### Steps to reproduce the bug _No response_ ### Environment...

ltfish

Automatic fallback for structuring/etc issues

3

### Description Our decompilation sometimes fails on complex code, and this sometimes happens because of our advanced decompilation logic. We should have automatic fallbacks that log the error and retry...

zardus

### Description ``` ====================================================================== FAIL: test_decompiling_abnormal_switch_case_case3 (tests.analyses.decompiler.test_decompiler.TestDecompiler) ---------------------------------------------------------------------- Traceback (most recent call last): File "/__w/angr/angr/build/src/angr/tests/analyses/decompiler/test_decompiler.py", line 4227, in test_decompiling_abnormal_switch_case_case3 assert isinstance(arg1_type.pts_to, SimTypeBottom) AssertionError ``` ### Steps to reproduce the bug...

ltfish