rs-soroban-env
rs-soroban-env copied to clipboard
Try hooking up MIRAI
We should try hooking up MIRAI to soroban to see if it can find panics we aren't aware of. This might be a bottomless task, so time-box it:
- [ ] see if it can find all (or any) interesting panics
- [ ] see if it can output a call graph (in one of its datalog formats) such that we can find interesting recursion paths
I tried this today and it finds nothing on soroban-env-common and crashes trying to analyze soroban-env-host
I did check that it "basically works" by putting in some egregious out-of-bounds indexes that it catches. It doesn't catch explicit panics, which seems surprising to me, but maybe that's intentional? The docs aren't really clear on what it expects to catch.
I don't think this is going to be especially constructive within the next week. We can keep poking at it but I'm going to bump this down from P0 to P1. It's not mature enough to rely on.
moved to https://github.com/endorlabs/MIRAI