This binary from the plaidctf seems to cause problems with qira: It does not reliably display data.
the binary
According to qira it runs about 61000 instructions (too many?). At some point it starts ropping itself for the rest of the run, maybe this is another problem.
Version: git commit f977ec43638962cdcab7cd8f2a5bc5996bbfd034. I just installed it over the 'old' version with sudo ./install.sh
crash report
$ qira "./qqq_ba4356a66c6a0f6802e5cebc3de5c4d1_ --pctfkey PCTF{foo}"
*** program is /vagrant/plaid/qqq_ba4356a66c6a0f6802e5cebc3de5c4d1_ with hash 120e312c89b9df2d5fe3122403e4fda86a1d5ce0
**** using /home/vagrant/qira/tracers/qemu/qemu-2.5.1/i386-linux-user/qemu-i386 for 0x3
no qira server found, starting it
*** deleting old runs
**** running /vagrant/plaid/qqq_ba4356a66c6a0f6802e5cebc3de5c4d1_
****** starting WEB SERVER on 0.0.0.0:3002
Validating key...
wrong
*** using base 0 for 0
on 0 going from 1 to 378724...*** WARNING, changing segment 0x8048000 135835459
done 295.800000 ms
*** mapping 064f80d002469c9de9f19d821766081ae2effabd /usr/lib/locale/locale-archive sz:0x1887f0 off:0x0 @ 0xF6674000 done
client connected {0: [1, 61128]}
SOCKET 227.31 ms in getinstructions with (0, 60443, 60427, 60460)
SOCKET 551.71 ms in getinstructions with (0, 60444, 60428, 60461)
SOCKET 53.73 ms in getregisters with (0, 60443)
SOCKET 444.51 ms in getinstructions with (0, 60445, 60429, 60462)
SOCKET 73.43 ms in getregisters with (0, 60444)
SOCKET 1313.96 ms in getinstructions with (0, 60446, 60430, 60463)
SOCKET 219.30 ms in getregisters with (0, 60445)
SOCKET 52.83 ms in getclnum with (0, 60446, [u'L', u'S'], 2)
SOCKET 1958.43 ms in getinstructions with (0, 60447, 60431, 60464)
SOCKET 130.99 ms in getchanges with (-1, u'0x80a36e0', u'I', [0, 61128], 85.85393258426966, 60447)
SOCKET 1912.91 ms in getinstructions with (0, 60448, 60432, 60465)
SOCKET 157.73 ms in getregisters with (0, 60447)
SOCKET 171.85 ms in getclnum with (0, 60448, [u'L', u'S'], 2)
SOCKET 71.88 ms in getchanges with (-1, u'0x80a36e0', u'I', [0, 61128], 85.85393258426966, 60448)
SOCKET 1930.39 ms in getinstructions with (0, 60449, 60433, 60466)
SOCKET 63.04 ms in getchanges with (-1, u'0x80a36e0', u'I', [0, 61128], 85.85393258426966, 60449)
SOCKET 362.82 ms in getinstructions with (0, 60450, 60434, 60467)
SOCKET 75.27 ms in getregisters with (0, 60449)
SOCKET 165.04 ms in getclnum with (0, 60450, [u'L', u'S'], 2)
SOCKET 267.57 ms in getchanges with (-1, u'0x80a36e0', u'I', [0, 61128], 85.85393258426966, 60450)
SOCKET 5573.24 ms in getinstructions with (0, 60451, 60435, 60468)
Traceback (most recent call last):
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/gevent/pywsgi.py", line 884, in handle_one_response
self.run_application()
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/gevent/pywsgi.py", line 870, in run_application
self.result = self.application(self.environ, self.start_response)
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/flask/app.py", line 1836, in __call__
return self.wsgi_app(environ, start_response)
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/flask_socketio/__init__.py", line 37, in __call__
start_response)
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/engineio/middleware.py", line 47, in __call__
return self.engineio_app.handle_request(environ, start_response)
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/socketio/server.py", line 303, in handle_request
return self.eio.handle_request(environ, start_response)
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/engineio/server.py", line 244, in handle_request
socket.handle_post_request(environ)
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/engineio/socket.py", line 96, in handle_post_request
self.receive(pkt)
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/engineio/socket.py", line 48, in receive
self.server._trigger_event('message', self.sid, pkt.data)
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/engineio/server.py", line 330, in _trigger_event
return self.handlers[event](*args)
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/socketio/server.py", line 429, in _handle_eio_message
self._handle_event(sid, pkt.namespace, pkt.id, pkt.data)
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/socketio/server.py", line 371, in _handle_event
r = self._trigger_event(data[0], namespace, sid, *data[1:])
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/socketio/server.py", line 397, in _trigger_event
return self.handlers[namespace][event](*args)
File "/home/vagrant/qira/venv/local/lib/python2.7/site-packages/flask_socketio/__init__.py", line 177, in _handler
app = self.server.environ[sid]['flask.app']
KeyError: '3f9ff8348f9c49e9b9de8c70706e8fe1'
{'CONTENT_LENGTH': '5916',
'CONTENT_TYPE': 'text/plain;charset=UTF-8',
'GATEWAY_INTERFACE': 'CGI/1.1',
'HTTP_ACCEPT': '*/*',
'HTTP_ACCEPT_ENCODING': 'gzip, deflate',
'HTTP_ACCEPT_LANGUAGE': 'en-us',
'HTTP_CONNECTION': 'keep-alive',
'HTTP_COOKIE': '__utma=111872281.1738590689.1448917922.1456146375.1459771569.4; __utmz=111872281.1449526770.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); io=3f9ff8348f9c49e9b9de8c70706e8fe1; _ga=GA1.1.1738590689.1448917922; meteor_login_token=lfLq9FiBEsgUqlT22o3jDnHgHq18WX6S4go1ohNQy-b',
'HTTP_DNT': '1',
'HTTP_HOST': 'localhost:3002',
'HTTP_ORIGIN': 'http://localhost:3002',
'HTTP_REFERER': 'http://localhost:3002/',
'HTTP_USER_AGENT': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/601.5.17 (KHTML, like Gecko) Version/9.1 Safari/601.5.17',
'PATH_INFO': '/socket.io/',
'QUERY_STRING': 'EIO=3&transport=polling&t=1461076355062-45&sid=3f9ff8348f9c49e9b9de8c70706e8fe1',
'REMOTE_ADDR': '10.0.2.2',
'REMOTE_PORT': '63086',
'REQUEST_METHOD': 'POST',
'SCRIPT_NAME': '',
'SERVER_NAME': 'vagrant-ubuntu-wily-64',
'SERVER_PORT': '3002',
'SERVER_PROTOCOL': 'HTTP/1.1',
'SERVER_SOFTWARE': 'gevent/1.1 Python/2.7',
'flask.app': <Flask 'qira_webserver'>,
'wsgi.errors': <open file '<stderr>', mode 'w' at 0x7f4264dde1e0>,
'wsgi.input': <gevent.pywsgi.Input object at 0x7f426040a120>,
'wsgi.multiprocess': False,
'wsgi.multithread': False,
'wsgi.run_once': False,
'wsgi.url_scheme': 'http',
'wsgi.version': (1, 0)} failed with KeyError
Killed
Problem
This binary from the plaidctf seems to cause problems with qira: It does not reliably display data.
the binary
According to qira it runs about 61000 instructions (too many?). At some point it starts ropping itself for the rest of the run, maybe this is another problem.
Steps to reproduce
qira "./qqq_ba4356a66c6a0f6802e5cebc3de5c4d1 --pctfkey PCTF{foo}"Version: git commit
f977ec43638962cdcab7cd8f2a5bc5996bbfd034. I just installed it over the 'old' version withsudo ./install.shcrash report