Try hooking up MIRAI - Githubissues

graydon commented 11 months ago

We should try hooking up MIRAI to soroban to see if it can find panics we aren't aware of. This might be a bottomless task, so time-box it:

[ ] see if it can find all (or any) interesting panics
[ ] see if it can output a call graph (in one of its datalog formats) such that we can find interesting recursion paths

graydon commented 10 months ago

I tried this today and it finds nothing on soroban-env-common and crashes trying to analyze soroban-env-host

I did check that it "basically works" by putting in some egregious out-of-bounds indexes that it catches. It doesn't catch explicit panics, which seems surprising to me, but maybe that's intentional? The docs aren't really clear on what it expects to catch.

I don't think this is going to be especially constructive within the next week. We can keep poking at it but I'm going to bump this down from P0 to P1. It's not mature enough to rely on.

graydon commented 6 days ago

moved to https://github.com/endorlabs/MIRAI

stellar / rs-soroban-env

Try hooking up MIRAI #1158