angr/angr

Tests/refactoring needed for exception handling

Open

#1162 opened on Jul 30, 2018

View on GitHub
 (0 comments) (0 reactions) (0 assignees)Python (6,947 stars) (1,031 forks)batch import
help wantedrefactortests

Description

I implemented exception handling for windows, to emulate SEH to accommodate malware which obfuscated itself through exceptional control flow. This functionality still works last I checked, but it is untested.

Additionally, there is a lot of logic right now in the windows SimOS related to the "exception windup" which ought to be common functionality migrated to SimEngineVEX.

Contributor guide

Tech stack
python
Domain
securitytesting
Issue type
test
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
4
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
PythonAngr basicsSEH/exception handlingVEX IR
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
25
Research direction
Start by examining the current exception handling implementation in SimOS for Windows (likely in angr/angr/simos/windows.py or similar). Then understand the exception windup logic and identify what can be moved to SimEngineVEX. Write tests to cover the existing SEH emulation. There are no linked PRs or comments, so the issue is open for exploration.