使用Crystallizer分析sink点时，提示java.io.FileNotFoundException: /root/SeriFuzz/src/static/gadgetDB.store (No such file or directory)

[blueothershore]

环境配置： 服务器：Ubuntu 22.04.2 LTS Docker version 23.0.3, build 3e7cbfd

操作流程： docker pull prashast94/crystallizer:latest //正常拉取 docker run --security-opt seccomp=unconfined --name crystallize_test -v $PWD/targets:/root/SeriFuzz/targets -v $PWD/results:/root/SeriFuzz/results -it prashast94/crystallizer:latest /bin/bash //正常启动docker实例 ./run_campaigns.sh /root/SeriFuzz/targets/ngrinder/ngrinder-runtime-3.5.9.jar 60 60//报错

具体错误如下： == Java Exception in fuzzerInitialize: Exception in thread "main" java.lang.NullPointerException at com.example.GadgetDB.tagSourcesAndSinks(GadgetDB.java:114) at com.example.SeriFuzz.fuzzerInitialize(SeriFuzz.java:129)

/root/SeriFuzz/jazzer Restarting ./bazel-bin/jazzer --cp=./bazel-bin/examples/SeriFuzz_target_deploy.jar:/root/SeriFuzz/src/static/sootOutput/out.jar --target_class=com.example.SeriFuzz --instrumentation_excludes=org.jgrapht.::org.apache.log4j.::javassist.** --keep_going=5000 -timeout=60 -rss_limit_mb=8096 OpenJDK 64-Bit Server VM warning: Sharing is only supported for boot loader classes because bootstrap classpath has been appended

• set -e
• '[' '!' 2 -eq 2 ']'
• OUTDIR=/root/SeriFuzz/results
• MODE=concretization
• '[' concretization = sinkID ']'
• '[' concretization = concretization ']'
• mkdir -p /root/SeriFuzz/results/concretization
• cp -p /root/SeriFuzz/src/static/serifuzz.log /root/SeriFuzz/results/concretization/concretization_log
• cp -p /root/SeriFuzz/src/static/fnIDList.store /root/SeriFuzz/results/concretization/ cp: cannot stat '/root/SeriFuzz/src/static/fnIDList.store': No such file or directory

备注： ngrinder-runtime-3.5.9.jar从maven repository处下载 https://mvnrepository.com/artifact/org.ngrinder/ngrinder-runtime