trailofbits
Conflict between symbolic tracing code and export interval in BinRec plugins
Work trying to recover zip in BinRec revealed an issue between the export interval and symbolic tracing code. The OnSlotStateSwitch event is triggered when the export interval is reached, causing multiple LLVM IR files to be generated per trace when not using symbolic arguments. This condition does not result in a corresponding traceinfo file being created, which causes a failure during merging.
We should explore eliminating the export interval entirely, as binrec-uci appears to have increased this limit to avoid problems. @ameily confirmed that increasing the interval to 10K solves the problem.
Another option would be to always use the state number in the plugins (and later in merging), and this would allow a high export interval to remain.
