-
## Use case
When reading OSDI'21 papers (https://www.usenix.org/system/files/osdi21_full_proceedings_interior.pdf), there is a paper named *Horcrux: Automatic JavaScript Parallelism for Resourc…
-
Dear Z3 team,
I am experiencing some strange behavior of `z3.simplify()`. If I do not misinterpret, e.g., the semantics of the conversion of signed bit vectors to integers, this could be a severe b…
-
Hi, I am using angr to analysis the server like nginx and apache using concolic. The question is that the bin file like nginx will not treat the URL I request as an input. So in this way, when I want …
-
Hey !
I just tried many times to install and use QSym (This awesome piece of work!), but unless using Vagrant thing, I just failed all times !
I'm working on a new fuzzer stuff and Qsym would be…
-
Hi,
```solidity
//SPDX-License-Identifier: MIT
pragma solidity ^0.4.0;
contract CrossReentrancy {
// INSECURE
mapping (address => uint) private userBalances;
function transfer…
-
Hello S2E developers,
Thanks for your nice work on building a cool S2E! I am currently learning symbolic execution techniques as well as S2E and I hope this is the right place to raise a question. …
-
First of all, thanks for maintaining AFL++ - what an awesome project. Second, I am not sure this is a bug, or maybe a feature request instead, maybe this is a (un)known limitation. So bear with me ple…
f0rki updated
2 years ago
-
While using the symcc custom mutator on the afl++ libxml2 tutorial I encountered a problem where a pipe breaks and exits the program bevor fuzzing.
My Dockerfile:
```
FROM ubuntu:20.04 AS b…
-
Related to #5
More thoughts on having a `Value` class equivalent to `std::variant`:
- could be used everywhere in the API, instead of having to duplicate things between `Expr` and `Number`/`cst_t…
-
Hey!
I'm using my own fork of the rust Z3 binding to implement a concolic execution tool. However, I am running into an issue using the z3 optimizer to implement a constraint sampling approach ([SM…