Skip to content
Snippets Groups Projects

Repository graph

You can move around the graph by using the arrow keys.
Select Git revision
  • 13-keystone-should-return-an-error-when-assembling-instruction
  • 19-need-ubuntu22-support
  • 21-job-failed-248429
  • SRL-Windows
  • SRL_kernelModules
  • ZS-91-opensrc-zipr
  • add-u24
  • add_arm32_eh
  • ais-release-sept-2019
  • arm_port
  • aware-sw-delivery
  • bugfixes
  • cfar_phase1_final_release
  • cfar_phase2_3rdquarter_release
  • cfar_phase2_final_release
  • cfar_phase2_midterm_release
  • cfar_phase3_midterm_release
  • cgc-sw-deliverables
  • cgc_dev
  • copyright-headers
  • gt_eval
  • Release-2-26-2021
  • cfar-phase3-final
  • CFAR_AEI
  • CfarJuly2018Eval
  • pre-las-vegas
26 results
Created with Raphaël 2.2.013Apr121110765432130Mar2928272310Feb931Jan27262512Dec109876542130Nov2928252322212018171615111098432131Oct3029282726252120191817121110543130Sep2928272221161412986231Aug302726252422181716151298543230Jul2927262522211514128765129Jun2824232120171615141310131May13546Apr31Mar292523222118171518Jan171613121130Dec292830Nov5229Oct27OffsetInference looks for recursive functions, if found a flag is set, and when padding is added to that function, the padding is significantly reduced. no longer detect benign weaknesses by defaultinteger xformBlock grace inputs from consideration for BED if the input results in the program returning exit code 132-140 inclusive. New BED validation, now using the replayer for both baseline and replaying a transform. Changed p1/pn padding threshold to 512-1024 to support recursive funcs.If a function is not believed to have a dynamic stack frame, canary checks are performed prior to any function call. PNRegularExpressions.cpp: modified the regex_ret expression to only match lines that contain ret only.The primary change in this commit is the support of dynamic arrays and alloca functions as well as adding a few more prologue checks. ps_validate.sh and do_p1transform.sh now parse grace produced files using a more general regular expression. Typo found in PNRegularExpressions for ebp scaled regex, removed a useless + in the regex. Multiple sets of srand were causing repeated canary values.In a previous commit, PN was altered to not place canaries in a function if an AND esp, <const> instruction was found. That was altered, but the functionality in in PNTransformDriver.cpp still replaced AND esp with a nop. In this commit that code is commented out, i.e., AND esp instructions are untouched. removed extra outputrun diagnostics output through sort | uniqNew integer transform configuration -- emit warningsfixed bug with overflow instrumentation. we were not handling the case when the overflowing instruction didn't refer to a registerno validation of P1 if Grace produces 0 coverage for a function (or if Grace fails to produce coverage)Canaries not safe when stack is alignedNow support INFINITELOOP annotation correctlycover.sh no longer adds functions to the blacklist based on coverage. Instead it is left to PN to make the decision on how to transform. Changing pn threshold to 50% instruction coverage.Drop Grace's input and coverage tables as welladded support for infinite loop instrumentation (simply add callback to infinite loop handler)Added INFINITELOOP annotationModified do_p1transform.h do reflect changes to the naming conventions used for grace's output files. Fix a typo in extra timeout in do_concolic - OK johnp@Modified ps_validate.sh to reflect the new naming convention of exit status file as produced by grace. Fix a typo in ps_analyze and add an extra timeout in do_concolic - OK johnp@Altered ps_validate.sh, if grace has coverage the exit_status log is grep'ed for the exit status, no longer comparing raw log files. Fix to ps_analyze for grace.conf, and added testcaseThe exit_status file produced by grace has changed to include more than just the exit status. ps_validate.sh will not grep out the exit status in the case where grace fails to produce outputs. Modified exit code generated on canary overflow detection to call a new detector in strata that adheres to the detector convention.simple_overflow.peasoup was accidentally in the tests/simple directory. Changed the permissions on some of the test scripts to be executable. Merging in pn_with_canaries to replace previous PN without canaries.Merging additional tests from pn_with_canaries branch.Added -w | --watchdog <val> as an option to ps_analyze.sh. Watchdog timer value can now be specified on commandline to ps_analyze.sh. Default value set to 30 seconds.Change to correct calling convention - OK johnp@Use uniq to cut down on duplicate warning/errors