illera88 / Ponce

IDA 2016 plugin contest winner! Symbolic Execution just one-click away!
https://docs.idaponce.com
Other
1.48k stars 72 forks source link

How do you handle PCB status in snapshots? #84

Closed andreafioraldi closed 6 years ago

andreafioraldi commented 6 years ago

Hi guys your project is very cool, can i ask you if snapshots can work for example with file descriptors opening or brk calls? if i want to execute with ponce a piece of code with fread on a file descriptor but this fd was opened in the debugger before that i started the symbolic engine it will works?

0ca commented 6 years ago

Hi @andreafioraldi , Ponce snapshots don't work with file descriptors or other system resources.

In your example, you could put the snapshot before this file is open, or after the fread during the parsing of the data.

andreafioraldi commented 6 years ago

Ok thanks