Bug 384842 - Reporting for VEX IR semantic bugs
Summary: Reporting for VEX IR semantic bugs
Status: REPORTED
Alias: None
Product: valgrind
Classification: Developer tools
Component: vex (other bugs)
Version First Reported In: unspecified
Platform: unspecified Unspecified
: NOR normal
Target Milestone: ---
Assignee: Julian Seward
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-09-19 07:22 UTC by Soomin Kim
Modified: 2017-09-19 07:28 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Soomin Kim 2017-09-19 07:22:25 UTC
Dear Valgrind team,
 
Here at KAIST, Korea, we are doing a research project on testing
the correctness of binary lifters. The system is named MeanDiff,
which systematically finds semantic bugs by differential testing
the lifted output of thousands generated x86 and x86-64
instructions. We will be presenting a paper on our system
called "Testing Intermediate Representations for Binary Analysis"
at ASE 2017.
 
Valgrind's VEX lifter was included in our experiments and in result we have some
bugs we would like to report. In our attempt of making the bug
reports as concise as possible, we have made issues on your
behalf on our Github page below:
https://github.com/SoftSec-KAIST/MeanDiff/issues
 
Here the different binary lifters, including yours, are labeled
by name. In summary we found 4 unique bugs in VEX lifter.
 
If you have any questions feel free to write us or comment on the
Github issues.
 
Best regards,
Soomin Kim & Markus Faerevaag & Sang Kil Cha