eurecom-s3 / symcc

SymCC: efficient compiler-based symbolic execution
http://www.s3.eurecom.fr/tools/symbolic_execution/symcc.html
GNU General Public License v3.0
771 stars 137 forks source link

SymCC may crash if test-case handlers are instrumented #140

Closed sebastianpoeplau closed 1 year ago

sebastianpoeplau commented 1 year ago

If the handler registered with symcc_set_test_case_handler is compiled with SymCC instrumentation (which isn't unlikely if it's part of the program under test), it reads garbage parameter expressions from the runtime which may lead to crashes. We should therefore reset any parameter expressions before calling the handler.