airbus-seclab / bincat

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
1.66k stars 159 forks source link

Coverage missing #118

Closed DarkaMaul closed 4 years ago

DarkaMaul commented 4 years ago

Hello,

Even with every value set at top, some instruction fails to be "discovered".

I think the problem comes from the filter_vertices function where two states can be considered the same while not representing the same branch.