Skip to content

Symbolic execution PoC#1030

Closed
arcz wants to merge 2 commits intomasterfrom
symexec
Closed

Symbolic execution PoC#1030
arcz wants to merge 2 commits intomasterfrom
symexec

Conversation

@arcz
Copy link
Copy Markdown
Member

@arcz arcz commented Apr 18, 2023 •
edited
Loading

A quick PoC that breaks this contract (included in tests):

contract VulnerableContract {
   function func_one(int256 x) public pure {
     if (x / 4 == -20) {
       assert(false); // BUG
     }
   }

   function func_two(int128 x) public payable {
     if ((msg.value >> 30) / 7 == 2) {
       assert(false); // BUG
     }
   }
}

Screenshot 2023-04-19 at 00 21 49

Non-nix tests fail because I need to figure out how to install solvers :p

@arcz arcz requested a review from gustavo-grieco as a code owner April 18, 2023 01:15
@arcz arcz marked this pull request as draft April 18, 2023 01:15
@arcz arcz force-pushed the symexec branch 2 times, most recently from 9abcd5c to 857a527 Compare April 18, 2023 07:54
d-xo
d-xo reviewed Apr 18, 2023
View reviewed changes
@arcz arcz force-pushed the symexec branch 2 times, most recently from 13bf83d to 94f063a Compare June 14, 2023 10:20
@samalws-tob samalws-tob mentioned this pull request Mar 14, 2024
Merged
@gustavo-grieco
Copy link
Copy Markdown
Collaborator

gustavo-grieco commented May 3, 2024

Already merged in #1216

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@gustavo-grieco gustavo-grieco Awaiting requested review from gustavo-grieco gustavo-grieco is a code owner

@elopez elopez Awaiting requested review from elopez elopez will be requested when the pull request is marked ready for review elopez is a code owner

1 more reviewer

@d-xo d-xo d-xo left review comments

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@arcz @gustavo-grieco @d-xo