trailofbits/manticore

Report only used calldata

Open

#977 创建于 2018年7月14日

在 GitHub 查看
 (0 评论) (0 反应) (0 负责人)Python (3,469 star) (481 fork)batch import
ethereumhelp wanted

描述

Track what is used of the calldata so the ports look better. ex. only 4 bytes used here:

Transactions Nr. 2
Type: CALL (0)
From: attacker(0x1bfa530d5d685155e98cd7d9dd23f7b6a801cfef) 
To: contract0(0x67518339e369ab3d591d3569ab0a0d83b2ff5198) 
Value: 0 (*)
Data: 633ab5e063636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363636363 (*)

贡献者指南

技术栈
python
领域
tooling
议题类型
feature
难度面向新贡献者的预计实现难度，1 表示很小改动，5 表示专家级工作。
2
预计时间有经验贡献者完成调查、实现、测试并准备 pull request 的粗略时间范围。
under 1 hour
活动状态议题当前的可参与程度：新鲜、活跃、陈旧、阻塞或等待维护者输入。
stale
清晰度议题是否清楚说明期望改动、验收标准和下一步。
clear
前置要求
Python
新手友好度1-100 的估计分数，表示该议题对首次贡献者的友好程度。
70
研究方向
Investigate the report generation code in manticore, likely in manticore/core or manticore/ethereum modules. Identify where full calldata is printed and modify it to only show the bytes that are actually used by the contract. The example shows the first 4 bytes (function selector) are used; implement logic to detect used bytes based on execution trace or calldata consumption.