load-info arg should be set true when executed from file_taint

panda-re / lava

LAVA: Large-scale Automated Vulnerability Addition

Other

371 stars 60 forks source link

load-info arg should be set true when executed from file_taint #11

Closed RKX1209 closed 5 years ago

RKX1209 commented 5 years ago

file_taint plugin must be used with the state 'syscalls2:load-info=True', because it calls .enter_switch without the "__syscall_meta" not to be loaded. As a result, at this line lava crashed due to NULL pointer dereference (syscall_meta == null). I don't know why is a default value of load-info False, but I've fixed a lava script which can load syscalls2 correctly.

moyix commented 5 years ago

(Sorry about closing – it got auto-closed by a fix in PANDA) Could you check to see if the PANDA fix resolves the crash?

RKX1209 commented 5 years ago

Yeah. Now lava works fine. Thanks @m000