Commits · 54278cbb8c3f97a8021b338f3addaaa396210ac3 · Open Source Software / SMPStaticAnalyzer

Jul 17, 2017
- Fixes for loop analyses across regression tests. · fa9d667b
  clc5q authored 7 years ago
  
  Former-commit-id: 1a4ff933d0c4d5ce68b1e9726026c1c12922025c
  fa9d667b
Apr 22, 2017
- Implement critical argument shadowing defense. · 84d2b183
  clc5q authored 7 years ago
  
  Former-commit-id: 050776c085eac062c9b378076118d996345544f6
  84d2b183
Apr 21, 2017

Add command-line options for func ptr and arg shadowing, make common code for... · d99cad76

clc5q authored 7 years ago

Add command-line options for func ptr and arg shadowing, make common code for those two defenses; minor SPARK work.

Former-commit-id: bdd21a76912de7e4bf171bc5543218ae1b20e871

d99cad76

Mar 01, 2017
- SPARK translation work for the sha test case. · b77034fb
  clc5q authored 8 years ago
  
  Former-commit-id: 10253077ca5276f08c377454147e4fd7f22da277
  b77034fb
Feb 16, 2017
- Add command-line option to trigger reduced analysis mode for large binaries... · ad669c23
  clc5q authored 8 years ago
  
  Add command-line option to trigger reduced analysis mode for large binaries that might exhaust virtual memory. Former-commit-id: 82eea6e1ee6456c924d28b9106c033df17ebcb53
  ad669c23
- SPARK updates for sha test case; fix byte width issues for opcodes like lea edx,[rax+1]. · ebd299b6
  clc5q authored 8 years ago
  
  Former-commit-id: bdb919af1468f3a929b5a735b6221a50fe5f2047
  ebd299b6
Dec 13, 2016
- SPARK translation updates. · a3820ca0
  clc5q authored 8 years ago
  
  Former-commit-id: 6dc99225d66a19e035506685bff4988dfbe4deff
  a3820ca0
Oct 25, 2016
- Loop analyses and memory writing region analyses. · b5f6960e
  clc5q authored 8 years ago
  
  Former-commit-id: 256e05a5ac526dbc0c768febece164d9e3b89e3b
  b5f6960e
Jul 06, 2016

Uninit var detection; output disabled until USEs on call instructions can be... · 9347fc54

clc5q authored 8 years ago

Uninit var detection; output disabled until USEs on call instructions can be made less conservative.

Former-commit-id: 693761feeb30ad9fe4a2fc48f2fc124c6abc0b65

9347fc54

Jun 26, 2016
- support to re-invoke stars within an xform · 081ec738
  jdh8d authored 8 years ago
  
  Former-commit-id: 62f62ba2799dc21f09b9a475af42ecd3d7095800
  081ec738
Jun 24, 2016
- Update for STARS to run after selective_cfi. · 20c0bad7
  jdh8d authored 8 years ago
  
  Former-commit-id: c236f1e4e4b2022ed6fe578c48885549444ece9e
  20c0bad7
Jun 17, 2016
- Increased precision for CGC system call analysis. · e2168ff8
  clc5q authored 8 years ago
  
  Former-commit-id: 15bc586102fa82c3e9ab32d35060048617904420
  e2168ff8
Jun 16, 2016

Fix assertion; treat syscalls as NOT being unresolved indirect calls to help... · 50afd777

clc5q authored 8 years ago

Fix assertion; treat syscalls as NOT being unresolved indirect calls to help CGC (quick and dirty fix).

Former-commit-id: a1691d6302f7dcea1b172a27570ac0da0e19894a

50afd777

Jun 02, 2016
- Fix SetSIB() to preserve fourth bit of index reg number. · f399f6f2
  clc5q authored 8 years ago
  
  Former-commit-id: ce96d3470ad8473e1253540d0abea23181f88919
  f399f6f2
- Switch STARS_regnum_t to alias STARS_RegNo enum. · 3f15bb59
  clc5q authored 8 years ago
  
  Former-commit-id: 0572c54541daf20f03f146c634e5d4e25322f400
  3f15bb59
- Add STARS_regnum_t type and use it. · a8aa8cb6
  clc5q authored 8 years ago
  
  Former-commit-id: 5ea425775063029c03ef44b2dea299e8eae66e09
  a8aa8cb6
Jun 01, 2016
- Fix less-than operator for IRDB operands. · 15b9fd92
  clc5q authored 8 years ago
  
  Former-commit-id: 7a2045b27ae6d8a31ecde5e0d3d4a8c3feae4c99
  15b9fd92
May 30, 2016
- Map inst mnemonics from bea to IDA for prefetch opcodes. · 4d96cfca
  clc5q authored 8 years ago
  
  Former-commit-id: 8bd4b02d5e786e0426ba5a7aca60a0208e3de931
  4d96cfca
- Fix bea_regno value in switch again. · 21643dfb
  clc5q authored 8 years ago
  
  Former-commit-id: e0713ae7d6ac2f1ce9110f65596af7a578937e66
  21643dfb
- Fix bea_regno value in switch again. · 65a6c1b7
  clc5q authored 8 years ago
  
  Former-commit-id: 6589dbcf6f01ea1f2f9348b0b65058edbcbf6a7b
  65a6c1b7
- Fix beaEngine register names. · 10b02caa
  clc5q authored 8 years ago
  
  Former-commit-id: 6e825c69e067cc594a54fe9844686faefdb5975d
  10b02caa
- Fix IRDB problems discovered on libc. · 08361a4c
  clc5q authored 8 years ago
  
  Former-commit-id: ba96641d6ab13ab55806201b2486e6650b391953
  08361a4c
May 16, 2016
- Add INFO log when function address is taken. · 4b4fdc0f
  clc5q authored 8 years ago
  
  Former-commit-id: 3a0a2d0e9eaaa3c85708060157c96b67254264cf
  4b4fdc0f
May 13, 2016

DEADREGS work; handle local names of other blocks that are not referenced in... · 1c63b5a4

clc5q authored 8 years ago

DEADREGS work; handle local names of other blocks that are not referenced in current block, convert nops from data back to code when following a CALL.

Former-commit-id: 3c39474ea207d5cbc18dbbedf7685cf0f7ac779d

1c63b5a4

May 11, 2016

Convert USE reg from EAX+EDX to just EAX for div, idiv, and mul opcodes when... · 31312619

clc5q authored 8 years ago

Convert USE reg from EAX+EDX to just EAX for div, idiv, and mul opcodes when initializing operands from BeaEngine operands.

Former-commit-id: 54beef30ac938c04de50539ba291faa96a097924

31312619

May 10, 2016
- Rename beaEngine opcode prefetchNTA to prefetchnta to match IDA Pro. · 740c14df
  clc5q authored 8 years ago
  
  Former-commit-id: 7922c6283b98cc8ea951acd01881396576a65b95
  740c14df
- Handle AVX_REG type. · a509ef19
  clc5q authored 8 years ago
  
  Former-commit-id: 585ba7bf7e3e034a1ff038bb7b530c1a4dc8879c
  a509ef19
- Handle opcodes that set, clear, or complement bits in the EFLAGS register in STARS_GetCmd(). · e4c1acfe
  clc5q authored 8 years ago
  
  Former-commit-id: d10ef5b4cee57262edf2a450a8a53c71753fe798
  e4c1acfe
May 07, 2016

Handle stupid beaEngine r14B register the same as r14b because those bozos... · ba7d9d04

clc5q authored 8 years ago

Handle stupid beaEngine r14B register the same as r14b because those bozos have an alias just for r14b. Fix case fall-through in SegReg initialization.

Former-commit-id: eb3f8ee6ba621f38f5408539e85302b26dcba8da

ba7d9d04

Fix GetByteWidth() when register operands have subword suffixes such as r12b, r13w, r14d. · f15cfdf0
clc5q authored 8 years ago
```
Former-commit-id: 5ee506198fa843177238bffa31f6b158cfba6826
```
f15cfdf0

May 06, 2016
- DEADREGS fixes for subword operations. · a6898738
  clc5q authored 8 years ago
  
  Former-commit-id: dbf2b29d58b90b5b0151498a8f3bbbd8b25eb9de
  a6898738
May 03, 2016
- DEADREGS fix: Allow callee-saved regs to pass through a func without being declared dead. · 3eced7be
  clc5q authored 8 years ago
  
  Former-commit-id: 407f83826ef32a971e3967da525af72adcf71b50
  3eced7be
- Use environment var for file name to work around IDA Pro failure on Red Hat Linux. · 0e151ffd
  clc5q authored 8 years ago
  
  Former-commit-id: b0855f157650c015ee2d810b89c867efc0e04fc5
  0e151ffd
Mar 21, 2016

Reduce memory; handle huge SSA numbers; add assertions; alter code size limit... · ed7639ca

clc5q authored 9 years ago

Reduce memory; handle huge SSA numbers; add assertions; alter code size limit for 64-bit reduced processing.

Former-commit-id: 1b6cdbbd773d22eb7c3511cff5b9b656ff90d3e5

ed7639ca

Mar 19, 2016

Reduce alignment requirement from 4 bytes to 2 for code address search in data sections. · 93e3d802
clc5q authored 9 years ago
```
Former-commit-id: a915d00f9bdd52e9adb059befb9055bcf253952a
```
93e3d802

Add Dan's Guardian test case; don't search for 32-bit code addresses in 64-bit... · 83a85828

clc5q authored 9 years ago

Add Dan's Guardian test case; don't search for 32-bit code addresses in 64-bit data sections; mark IBT as COMPLETE when SCCP resolves indirect call target.

Former-commit-id: 106ed98c01ab85f7eddf4f01455de27193dafcac

83a85828

Speedup on large functions. · d79a1ca1
clc5q authored 9 years ago
```
Former-commit-id: c5edffb1ff109743af2c2e4c984b993e0c3496da
```
d79a1ca1

Mar 14, 2016
- Make void operands common within each instruction to save memory. · 0db51d41
  clc5q authored 9 years ago
  
  Former-commit-id: 0fe860a4f43af118055c3394b0d2d518dc6f4f21
  0db51d41
Feb 28, 2016

· b4f9c4d9

jdh8d authored 9 years ago

Former-commit-id: 289869fea211a72222a2ea8e2cc5a7554988a78a

b4f9c4d9

Feb 22, 2016
- Begin using new SMPFunction::FindShadowingPoint2 method. · 6e97c806
  clc5q authored 9 years ago
  
  Former-commit-id: 677a1fd5e80131cc897f763437d42231b066f9da
  6e97c806