Bjchan9an

Handling external functions for transfering taint flow

3

Hi, we are trying to perform taint analysis with SVF. A common case is as below: ```C void foo(char *p) { char cmd[32]; sprintf(cmd, "ls %s", p); system(cmd); } ```...

Thank you for your works. You mentioned that the Steelix is open source, but I can't find it, do you have its source code?

Methods such as ``getSequences()`` and ``graph_analysis()`` is not defined in currently released code

4

We find it difficult to reproduce this work since currently released code is not complete. Methods such as ``getSequences()`` and ``graph_analysis()`` is not defined in currently released code. Hope you...

I found the ``gau.prepareBBOffsets ()`` was called twice in runfuzzer.py, one in line 724 and the other in line 780. Maybe a redundant?

The following is the display of ida pro. The function ``sub_3000`` is in``.plt`` . Although it is not a user-defined code, it is regarded as a function by IDA Pro....

Why CodeRefsTo() excludes all call type cross-references

4

I found that the implementation of ``CodeRefsTo()`` excludes all ``call`` type cross-references, which is inconsistent with the results of ``CodeRefsTo()`` I observed in IDA Pro 7.0. ```PY # a code...