Commits · b3eb8709cc5b18e4c1048d1683ee1a6ad29dc538 · Open Source Software / SMPStaticAnalyzer

Nov 20, 2018
- Fixed-call-push robustness fix; minor speedup; add loop analysis diagnostic counters. · b3eb8709
  Clark Coleman authored 6 years ago
  
  b3eb8709
Oct 24, 2018
- WIP for memory range annotations; add constant propagation to STARS_Option_t. · 790b26f9
  Clark Coleman authored 6 years ago
  
  790b26f9
Sep 25, 2018
- Prepare for use of libehp to get EH_FRAME section info. · 7fe27636
  Clark Coleman authored 6 years ago
  
  7fe27636
Sep 18, 2018
- Audit func boundaries vs. catch block boundaries; begin detection of global... · 3b56cf16
  Clark Coleman authored 6 years ago
  
  Audit func boundaries vs. catch block boundaries; begin detection of global var sentinel usage in loops.
  3b56cf16
Sep 03, 2018
- Begin using IDA Pro catch block addrs to improve CFG. · bb0819aa
  Clark Coleman authored 6 years ago
  
  bb0819aa
Aug 10, 2018
- Fix fall-through and conditional tail call code in SMPFunction::ComputeReturnTargets(). · a0694899
  Clark Coleman authored 6 years ago
  
  a0694899
Apr 06, 2018
- Drive SPARK translation from command-line option. · 997b89e6
  clc5q authored 6 years ago
  
  Former-commit-id: c6113e62f4c9c1f8c246ec8f6619a7da14346380
  997b89e6
Apr 04, 2018
- Make verbose loop analysis output depend on environment var STARS_VERBOSE_LOOPS. · d8dbfd90
  clc5q authored 6 years ago
  
  Former-commit-id: 5d1bbf9cee8365e79a9b3f2a7f58fee59b7f92f0
  d8dbfd90
Apr 01, 2018
- Add command-line option for deep loop analyses. · 0cc1cfbf
  clc5q authored 6 years ago
  
  Former-commit-id: fcfc0eb3841387b6b26c1934e0766bdccde6a130
  0cc1cfbf
Mar 17, 2018
- better warning handling · 73d78e40
  jdh8d authored 7 years ago
  
  Former-commit-id: a64974349267da832a467d1564cfd8d72229d8b2
  73d78e40
Nov 30, 2017
- Updates to handle IDA Pro 7.0 release. · d073ab12
  clc5q authored 7 years ago
  
  Former-commit-id: 33bcf1b3f2abc33e6df79221c8baabe40c5a495e
  d073ab12
Oct 02, 2017
- Port to IDA Pro 7.0. · 4327f38f
  clc5q authored 7 years ago
  
  Former-commit-id: 2dd0ed8311dabb07beb350616887c74946a73d65
  4327f38f
Aug 08, 2017
- Add ImproveCFG option, emit CONSTARG annotations. · 1fd74592
  clc5q authored 7 years ago
  
  Former-commit-id: 901de2942253867b9104de72de579ff42a34fb18
  1fd74592
Jul 17, 2017
- Fixes for loop analyses across regression tests. · fa9d667b
  clc5q authored 7 years ago
  
  Former-commit-id: 1a4ff933d0c4d5ce68b1e9726026c1c12922025c
  fa9d667b
Apr 22, 2017
- Implement critical argument shadowing defense. · 84d2b183
  clc5q authored 7 years ago
  
  Former-commit-id: 050776c085eac062c9b378076118d996345544f6
  84d2b183
Apr 21, 2017

Add command-line options for func ptr and arg shadowing, make common code for... · d99cad76

clc5q authored 7 years ago

Add command-line options for func ptr and arg shadowing, make common code for those two defenses; minor SPARK work.

Former-commit-id: bdd21a76912de7e4bf171bc5543218ae1b20e871

d99cad76

Mar 01, 2017
- SPARK translation work for the sha test case. · b77034fb
  clc5q authored 8 years ago
  
  Former-commit-id: 10253077ca5276f08c377454147e4fd7f22da277
  b77034fb
Feb 16, 2017
- Add command-line option to trigger reduced analysis mode for large binaries... · ad669c23
  clc5q authored 8 years ago
  
  Add command-line option to trigger reduced analysis mode for large binaries that might exhaust virtual memory. Former-commit-id: 82eea6e1ee6456c924d28b9106c033df17ebcb53
  ad669c23
- SPARK updates for sha test case; fix byte width issues for opcodes like lea edx,[rax+1]. · ebd299b6
  clc5q authored 8 years ago
  
  Former-commit-id: bdb919af1468f3a929b5a735b6221a50fe5f2047
  ebd299b6
Oct 25, 2016
- Loop analyses and memory writing region analyses. · b5f6960e
  clc5q authored 8 years ago
  
  Former-commit-id: 256e05a5ac526dbc0c768febece164d9e3b89e3b
  b5f6960e
Jul 06, 2016

Uninit var detection; output disabled until USEs on call instructions can be... · 9347fc54

clc5q authored 8 years ago

Uninit var detection; output disabled until USEs on call instructions can be made less conservative.

Former-commit-id: 693761feeb30ad9fe4a2fc48f2fc124c6abc0b65

9347fc54

Jun 30, 2016
- fixed re-init problem · 408518c1
  an7s authored 8 years ago
  
  Former-commit-id: d6c246e21efb1e5dd4c107929af4e645c955a401
  408518c1
Jun 24, 2016
- Update for STARS to run after selective_cfi. · 20c0bad7
  jdh8d authored 8 years ago
  
  Former-commit-id: c236f1e4e4b2022ed6fe578c48885549444ece9e
  20c0bad7
Jun 17, 2016
- Increased precision for CGC system call analysis. · e2168ff8
  clc5q authored 8 years ago
  
  Former-commit-id: 15bc586102fa82c3e9ab32d35060048617904420
  e2168ff8
Jun 02, 2016
- Add STARS_regnum_t type and use it. · a8aa8cb6
  clc5q authored 8 years ago
  
  Former-commit-id: 5ea425775063029c03ef44b2dea299e8eae66e09
  a8aa8cb6
May 13, 2016

DEADREGS work; handle local names of other blocks that are not referenced in... · 1c63b5a4

clc5q authored 8 years ago

DEADREGS work; handle local names of other blocks that are not referenced in current block, convert nops from data back to code when following a CALL.

Former-commit-id: 3c39474ea207d5cbc18dbbedf7685cf0f7ac779d

1c63b5a4

May 11, 2016
- Clean up multiply and divide RTL construction, handling IDA and IRDB operand lists equally. · fe4baa48
  clc5q authored 8 years ago
  
  Former-commit-id: 0d1ccce9d7da5438e05c9ede5732bef521e22cc3
  fe4baa48
May 03, 2016
- DEADREGS fix: Allow callee-saved regs to pass through a func without being declared dead. · 3eced7be
  clc5q authored 8 years ago
  
  Former-commit-id: 407f83826ef32a971e3967da525af72adcf71b50
  3eced7be
Mar 19, 2016

Add Dan's Guardian test case; don't search for 32-bit code addresses in 64-bit... · 83a85828

clc5q authored 9 years ago

Add Dan's Guardian test case; don't search for 32-bit code addresses in 64-bit data sections; mark IBT as COMPLETE when SCCP resolves indirect call target.

Former-commit-id: 106ed98c01ab85f7eddf4f01455de27193dafcac

83a85828

Speedup on large functions. · d79a1ca1
clc5q authored 9 years ago
```
Former-commit-id: c5edffb1ff109743af2c2e4c984b993e0c3496da
```
d79a1ca1

Feb 03, 2016
- Refine IBT annotations with reason codes. · 87525118
  clc5q authored 9 years ago
  
  Former-commit-id: 864cd696ee3979674a613dd79ce8aa0c86de74e4
  87525118
- Improve STARSxrefs annotations. · 0fa68463
  clc5q authored 9 years ago
  
  Former-commit-id: b8bd3fefcc0a412b141c6af8b340c5e73351fcea
  0fa68463
Feb 02, 2016
- Derived class fixes to remove const qualifier. · 67883d85
  clc5q authored 9 years ago
  
  Former-commit-id: e44c1c31bcc8f5c136a14128270cc2cfb59b645c
  67883d85
- Cache result to speed up IRDB GetIDAOpcode(). · b89a1445
  clc5q authored 9 years ago
  
  Former-commit-id: 632c552df4e7c4c86b34da63f5e93bf2f0192877
  b89a1445
- Continue operand encoding normalization. · fa23ce5d
  clc5q authored 9 years ago
  
  Former-commit-id: d99a0ebe1912de54fdbc80de9c4b923269c176b9
  fa23ce5d
Feb 01, 2016
- Add base class STARSOp.cpp and move MDExtractAddressFields() to it. · 8d5fe799
  clc5q authored 9 years ago
  
  Former-commit-id: a27e089557e419710b83d4e71eff0c0ae3ed8a64
  8d5fe799
- Normalize encoding of memory operands. · 8fc22652
  clc5q authored 9 years ago
  
  Former-commit-id: 9c82291904911e85fb78fc87d3f0d9b21da702b2
  8fc22652
Jan 12, 2016

Be conservative in USE lists for calls or tail calls to linker stub functions... · ccd0f989

clc5q authored 9 years ago

Be conservative in USE lists for calls or tail calls to linker stub functions to ensure DEADREGS correctness.

Former-commit-id: 0fc834a5652fc27b40a8e6b05124ce05e74b11b0

ccd0f989

Jan 11, 2016

Detect potential multi-entry functions from code and data xrefs; avoid... · 678c1410

clc5q authored 9 years ago

Detect potential multi-entry functions from code and data xrefs; avoid COMPLETE return target STARSxrefs annotations for multi-entry functions.

Former-commit-id: 02ec8e8ed701d99884b8b444919265b134f8fe2b

678c1410

Dec 25, 2015
- Partial commit of function pointer shadowing logic. · b84c5ffb
  clc5q authored 9 years ago
  
  Former-commit-id: 4dbe1e2891ae337b9881a4212baa8afffc434c2e
  b84c5ffb