While running symbolic execution on my binary, angr consistently creates an errored state with the message: State errored with "Hit a symbolic conditional operation (need If or BVV, got Concat). Something has gone wildly wrong."
Steps to reproduce the bug
Extract these files somewhere: bug_files.tar.gz
It includes the binary that needs to be analyzed and the python script to analyze it.
Pull and run the latest docker image for angr with the below command setting the path to the extracted zip file.
docker pull angr/angr:latest
docker run -it -v /path/to/extracted/zip/:/home/angr/bug angr/angr:latest
In the container run:
python bug/angr_code.py
After running for around 30 seconds, the error will be printed and a pdb debug session will be opened on the error.
Note: Once the bug is fixed, the script likely will still not successfully complete but should error with a different message or run for much longer than 30 seconds.
Note: The binary being analyzed is my own binary for which I have the source code but I can not share it as of now. It is a bare metal binary which should not interact with the system in any way. It is written in Rust with the target "armv7r-none-eabihf".
Environment
The environment is the latest docker container for angr: angr/angr:latest
Description
While running symbolic execution on my binary, angr consistently creates an errored state with the message: State errored with "Hit a symbolic conditional operation (need If or BVV, got Concat). Something has gone wildly wrong."
Steps to reproduce the bug
Extract these files somewhere: bug_files.tar.gz It includes the binary that needs to be analyzed and the python script to analyze it.
Pull and run the latest docker image for angr with the below command setting the path to the extracted zip file. docker pull angr/angr:latest docker run -it -v /path/to/extracted/zip/:/home/angr/bug angr/angr:latest
In the container run: python bug/angr_code.py
After running for around 30 seconds, the error will be printed and a pdb debug session will be opened on the error.
Note: Once the bug is fixed, the script likely will still not successfully complete but should error with a different message or run for much longer than 30 seconds.
Note: The binary being analyzed is my own binary for which I have the source code but I can not share it as of now. It is a bare metal binary which should not interact with the system in any way. It is written in Rust with the target "armv7r-none-eabihf".
Environment
The environment is the latest docker container for angr: angr/angr:latest
Additional context
No response