angr / angr-management

The official angr GUI.
BSD 2-Clause "Simplified" License
886 stars 110 forks source link

angr.analyses.cfg.cfg_fast | Error collecting XRefs for function sub_4015f0. #1159

Open jvoisin opened 8 months ago

jvoisin commented 8 months ago

Description

Some errors in the logs upon binary analysis. angr-management doesn't crash and is still usable though.

$ angr-management 

(python:49655): dbind-WARNING **: 17:30:31.818: AT-SPI: Error retrieving accessibility bus address: org.freedesktop.DBus.Error.ServiceUnknown: The name org.a11y.Bus was not provided by any .service files
0.00s - Debugger warning: It seems that frozen modules are being used, which may
0.00s - make the debugger miss breakpoints. Please pass -Xfrozen_modules=off
0.00s - to python to disable frozen modules.
0.00s - Note: Debugging will proceed. Set PYDEVD_DISABLE_FILE_VALIDATION=1 to disable this validation.
INFO     | 2024-01-17 17:30:46,356 | angrmanagement.data.jobs.job | Job "Loading file" started
WARNING  | 2024-01-17 17:30:46,372 | cle.backends.backend | Unused kwargs for loading binary /home/jvoisin/Downloads/free-madame-de-maintenon-challenge/challenge: ignore_missing_arch
INFO     | 2024-01-17 17:31:03,867 | angrmanagement.data.jobs.job | Job "Loading file" completed after 17.51 seconds
INFO     | 2024-01-17 17:31:03,867 | angrmanagement.data.jobs.job | Job "CFG generation" started
WARNING  | 2024-01-17 17:31:04,227 | angr.analyses.propagator.engine_vex.SimEnginePropagatorVEX | Unsupported Binop Iop_MullU64.
WARNING  | 2024-01-17 17:31:04,240 | angr.analyses.propagator.engine_vex.SimEnginePropagatorVEX | Unsupported Binop Iop_64HLto128.
ERROR    | 2024-01-17 17:31:04,305 | angr.analyses.cfg.cfg_fast | Error collecting XRefs for function sub_4015f0.
Traceback (most recent call last):
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/analyses/cfg/cfg_fast.py", line 1679, in do_full_xrefs
    self.project.analyses.XRefs(func=f, replacements=prop.replacements)
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/analyses/analysis.py", line 216, in __call__
    r = w(*args, **kwargs)
        ^^^^^^^^^^^^^^^^^^
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/analyses/analysis.py", line 201, in wrapper
    oself.__init__(*args, **kwargs)
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/analyses/xrefs.py", line 222, in __init__
    self._analyze()
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/analyses/forward_analysis/forward_analysis.py", line 252, in _analyze
    self._analysis_core_graph()
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/analyses/forward_analysis/forward_analysis.py", line 269, in _analysis_core_graph
    changed, output_state = self._run_on_node(n, job_state)
                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/analyses/xrefs.py", line 248, in _run_on_node
    engine.process(None, block=block, fail_fast=self._fail_fast)
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/engines/light/engine.py", line 106, in process
    self._process(state, None, block=kwargs.pop("block", None), whitelist=kwargs.pop("whitelist", None))
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/engines/light/engine.py", line 144, in _process
    self._process_Stmt(whitelist=whitelist)
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/engines/light/engine.py", line 164, in _process_Stmt
    self._handle_Stmt(stmt)
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/engines/light/engine.py", line 194, in _handle_Stmt
    getattr(self, handler)(stmt)
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/analyses/xrefs.py", line 61, in _handle_WrTmp
    self._expr(stmt.data)
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/engines/light/engine.py", line 236, in _expr
    return getattr(self, handler)(expr)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/engines/light/engine.py", line 377, in _handle_Binop
    return getattr(self, handler)(expr)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/engines/light/engine.py", line 790, in _handle_ExpCmpNE64
    return self._top(expr.result_size(self.tyenv))
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/engines/light/engine.py", line 46, in _top
    raise NotImplementedError()
NotImplementedError
$

Steps to reproduce the bug

  1. open the IDA Challenge in angr-management
  2. tick the perform deep analysis on cross references (slow) box
  3. check the logs out

challenge.zip

Environment

(.ven) jvoisin@facilier 17:45 ~ python -m angr.misc.bug_report
angr environment report
=============================
Date: 2024-01-17 17:45:35.860530
Running in virtual environment at /home/jvoisin/Downloads/.ven
Platform: linux-x86_64
Python version: 3.11.7 (main, Dec  8 2023, 14:22:46) [GCC 13.2.0]
######## angr #########
Python found it in /home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/__init__.py
Pip version angr 9.2.85
Couldn't find git info
######## ailment #########
Python found it in /home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/ailment/__init__.py
Pip version ailment 9.2.85
Couldn't find git info
######## cle #########
Python found it in /home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/cle/__init__.py
Pip version cle 9.2.85
Couldn't find git info
######## pyvex #########
Python found it in /home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/pyvex/__init__.py
Pip version pyvex 9.2.85
Couldn't find git info
######## claripy #########
Python found it in /home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/claripy/__init__.py
Pip version claripy 9.2.85
Couldn't find git info
######## archinfo #########
Python found it in /home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/archinfo/__init__.py
Pip version archinfo 9.2.85
Couldn't find git info
######## z3 #########
Python found it in /home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/z3/__init__.py
Pip version z3-solver 4.10.2.0
Couldn't find git info
######## unicorn #########
Python found it in /home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/unicorn/__init__.py
Pip version unicorn 2.0.1.post1
Couldn't find git info
######### Native Module Info ##########
angr: <CDLL '/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/angr/state_plugins/../lib/angr_native.so', handle 38b4390 at 0x7f0563641410>
unicorn: <CDLL '/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/unicorn/lib/libunicorn.so.2', handle 32bcac0 at 0x7f0566907b90>
pyvex: <cffi.api._make_ffi_library.<locals>.FFILibrary object at 0x7f05677dad90>
z3: <CDLL '/home/jvoisin/Downloads/.ven/lib/python3.11/site-packages/z3/lib/libz3.so', handle 2f1dea0 at 0x7f056949aad0>
(.ven) jvoisin@facilier 17:45 ~ 

Additional context

No response