Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restrain symbolic pointers to certain memory areas #9

Open
Boyan-MILANOV opened this issue Dec 24, 2021 · 1 comment
Open

Restrain symbolic pointers to certain memory areas #9

Boyan-MILANOV opened this issue Dec 24, 2021 · 1 comment
Assignees
Labels
core Maat core internals enhancement New feature or request

Comments

@Boyan-MILANOV
Copy link
Collaborator

We should have a setting that allows to provide a list of address ranges, and force possible values for symbolic pointers to be within those ranges. This setting should be compatible with symptr_refine_range and symptr_limit_range.

The rational behind such an option is to allow the symbolic pointer analysis to target only specific memory areas, just as was needed for the zehn challenge from hxp 2021 CTF.

Implementation idea: just compute the possible value range as before, and then refine it using the allowed ranges. If there are intersections, keep them as possible values for the pointer, if there are no intersections, use the pointer concrete value.

@Boyan-MILANOV Boyan-MILANOV added enhancement New feature or request core Maat core internals labels Dec 24, 2021
@Boyan-MILANOV Boyan-MILANOV self-assigned this Dec 24, 2021
@Boyan-MILANOV
Copy link
Collaborator Author

Note: we might want to have two separate settings for symbolic reads and symbolic writes, e.g symptr_force_read_range and symptr_force_write_range.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
core Maat core internals enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant