trailofbits/manticore

Add the pathgrind examples to test manticore

Open

#884 opened on Apr 30, 2018

View on GitHub
 (0 comments) (0 reactions) (0 assignees)Python (3,469 stars) (481 forks)batch import
easygood first issuehelp wantedideatesting

Description

There are more than 20 different small C programs to test the input generation in the pathgrind tool (but sadly this project is abandoned!). One particularly interesting example is the re-implementation of the ms08_067 XP/Vista vulnerability. Our tool should be able to discover such vulnerability exploring all the paths.

Contributor guide

Tech stack
pythonc
Domain
testingsecurity
Issue type
test
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
Basic C programmingUnderstanding of symbolic execution
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60
Research direction
Look at the pathgrind test cases at https://github.com/codelion/pathgrind/tree/master/testcase, especially ms08 067.c. Understand how manticore currently handles input generation and symbolic execution. Then add these C programs as test cases to the manticore test suite, ensuring that manticore can explore all paths and discover the vulnerability.