angr / angr

A powerful and user-friendly binary analysis platform!
http://angr.io
BSD 2-Clause "Simplified" License
7.58k stars 1.08k forks source link

State errored with "Hit a symbolic conditional operation (need If or BVV, got Concat). Something has gone wildly wrong." #4843

Open dzueck opened 1 month ago

dzueck commented 1 month ago

Description

While running symbolic execution on my binary, angr consistently creates an errored state with the message: State errored with "Hit a symbolic conditional operation (need If or BVV, got Concat). Something has gone wildly wrong."

Steps to reproduce the bug

Extract these files somewhere: bug_files.tar.gz It includes the binary that needs to be analyzed and the python script to analyze it.

Pull and run the latest docker image for angr with the below command setting the path to the extracted zip file. docker pull angr/angr:latest docker run -it -v /path/to/extracted/zip/:/home/angr/bug angr/angr:latest

In the container run: python bug/angr_code.py

After running for around 30 seconds, the error will be printed and a pdb debug session will be opened on the error.

Note: Once the bug is fixed, the script likely will still not successfully complete but should error with a different message or run for much longer than 30 seconds.

Note: The binary being analyzed is my own binary for which I have the source code but I can not share it as of now. It is a bare metal binary which should not interact with the system in any way. It is written in Rust with the target "armv7r-none-eabihf".

Environment

The environment is the latest docker container for angr: angr/angr:latest

Additional context

No response

dzueck commented 1 month ago

This may be related to https://github.com/angr/angr/issues/4742