search

s3team / Squirrel

MIT License
184 stars 54 forks source link

case study 1 mentioned in Paper. #3

Closed spwpun closed 4 years ago

spwpun commented 4 years ago

I found that the case study 1‘s PoC in Listing 1 of Appendix didn't work when I tried to recurrent it on Ubuntu 16. image The SQLite's version(v3.30.1) is same as mentioned in Paper. It seems like the PoC doesn't make the program go to the isCandidateForOptIn function.

zr950624 commented 4 years ago

I found that the case study 1‘s PoC in Listing 1 of Appendix didn't work when I tried to recurrent it on Ubuntu 16. image The SQLite's version(v3.30.1) is same as mentioned in Paper. It seems like the PoC doesn't make the program go to the isCandidateForOptIn function.

Please see the #16 bug in Table 3. You need to revert the version before that hash by git checkout so you can trigger the bug. Otherwise, you will go to different logic since developers have fixed this bug.

spwpun commented 4 years ago

@zr950624 Thx，I will try it.

spwpun commented 4 years ago

I found that the case study 1‘s PoC in Listing 1 of Appendix didn't work when I tried to recurrent it on Ubuntu 16. image The SQLite's version(v3.30.1) is same as mentioned in Paper. It seems like the PoC doesn't make the program go to the isCandidateForOptIn function.

Please see the #16 bug in Table 3. You need to revert the version before that hash by git checkout so you can trigger the bug. Otherwise, you will go to different logic since developers have fixed this bug.