compsec-snu / razzer

A Kernel fuzzer focusing on race bugs
356 stars 61 forks source link

static-analysis is killed while do_analyze #13

Open zizhiyoumu-fuzz opened 5 years ago

zizhiyoumu-fuzz commented 5 years ago

While I do Static analysis according to docs/static-analysis.md, I found that ./run-partition-analysis.py is killed.The log is shown as below:

begin do_analyze( sound/built-in.bc init/built-in.bc fs/built-in.bc ipc/built-in.bc ) [] NAME: [sound] [] Kernel version: v4.17 [] Making static analysis directory [] DIR: /root/lava_workspace/razzer_test/razzer/tools/race-syzkaller/exp/configs/kernel/partition/v4.17 [] Generating combined-sound.bc [] Generating mssa.sound Killed [] Generating mempair_all.net-vmw_vsock [] Prune and check_testing_bugs [WARN] Testing bug ('drivers/tty/n_hdlc.c:440', 'drivers/tty/n_hdlc.c:216') not found [WARN] Testing bug ('net/packet/af_packet.c:3660', 'net/packet/af_packet.c:4229') not found [WARN] Testing bug ('net/packet/af_packet.c:1653', 'net/packet/af_packet.c:1710') not found [WARN] Testing bug ('net/ipv4/raw.c:640', 'net/ipv4/ip_sockglue.c:748') not found [WARN] Testing bug ('net/sctp/associola.c:1088', 'net/sctp/socket.c:7423') not found [WARN] Testing bug ('net/packet/af_packet.c:1645', 'net/packet/af_packet.c:367') not found

I found in scripts/misc/analysis.py,it do as below: cmd = "wpa -indCallLimit=100000 -dump-callgraph -ander -vgep -svfg -dump-mssa -dump-race " + args.bitcode What is it doing?

How to deal with it ? Thanks!

lifeasageek commented 5 years ago

wpa is the key running the static analysis using SVF (https://github.com/SVF-tools/SVF). There can be many reasons, but my guess is that you may not have enough memory?

LittleSec commented 5 years ago

I notice that these locations of [WARN] are not code or some codes seem that has nothing to do with memory access.