Open bblum opened 9 years ago
say we get a DR pair, 0xfoo and 0xbar, found during exploration of mx_lock state space.
current behavior it will generate these new state spaces:
dr 0xfoo dr 0xfoo, mx_lock dr 0xbar dr 0xbar, mx_lock
desired behaviour:
dr 0xfoo dr 0xbar dr 0xfoo, dr 0xbar dr 0xfoo, dr 0xbar, mx_lock
will require altering message_data_race protocol to accept either 1 or 2 eips at once (see landslide/memory.c)
say we get a DR pair, 0xfoo and 0xbar, found during exploration of mx_lock state space.
current behavior it will generate these new state spaces:
desired behaviour: