Commit Graph

Select branches

Hide Pull Requests

master

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#110

#112

#113

#114

#115

#116

#117

#118

#122

#125

#126

#127

#128

#129

#13

#131

#132

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#155

#156

#157

#158

#159

#160

#161

#162

#163

#164

#165

#166

#168

#169

#17

#17

#171

#172

#173

#174

#175

#177

#178

#179

#18

#18

#180

#181

#182

#183

#184

#185

#186

#188

#189

#19

#19

#190

#191

#192

#193

#194

#195

#196

#198

#199

#2

#20

#200

#201

#202

#203

#205

#206

#207

#208

#209

#21

#21

#210

#211

#212

#213

#214

#216

#217

#218

#219

#22

#220

#221

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#28

#280

#281

#282

#283

#284

#285

#286

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#300

#301

#302

#303

#304

#305

#306

#307

#308

#309

#31

#310

#311

#312

#313

#314

#316

#317

#318

#319

#32

#320

#321

#322

#323

#324

#325

#326

#327

#328

#329

#33

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#383

#384

#385

#386

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#470

#471

#472

#473

#474

#475

#476

#48

#49

#50

#51

#52

#53

#54

#55

#56

#57

#59

#6

#60

#61

#63

#64

#65

#66

#67

#68

#69

#7

#70

#71

#72

#74

#75

#76

#77

#78

#80

#81

#82

#83

#84

#85

#87

#88

#89

#9

#90

#91

#92

#93

#95

#96

#97

#98

#99

v0.1.0

v1.0.0

v1.1.0

v1.1.1

v1.10.0

v1.2.0

v1.3.0

v1.3.1

v1.3.2

v1.3.3

v1.3.4

v1.3.4.1

v1.3.5

v1.3.6

v1.3.7

v1.3.8

v1.4.0

v1.4.1

v1.5.0

v1.6.0

v1.6.1

v1.6.2

v1.7.0

v1.7.1

v1.7.2

v1.7.3

v1.7.4

v1.8.0

v1.8.1

v1.9.0

v2.0.0

v2.1.0

v2.1.1

Mono Color

• f6e57f0ba2 build(deps-dev): bump simplecov from 1.3.1 to 1.3.2 (#476) master dependabot[bot] 2026-10-07 10:55:59 +03:00
• dac64b4a5c build(deps-dev): bump simplecov from 1.3.0 to 1.3.1 (#475) dependabot[bot] 2026-09-29 09:29:52 +08:00
• b4628a96a4 build(deps-dev): bump rubocop from 1.90.0 to 1.91.0 (#473) dependabot[bot] 2026-09-16 07:51:02 +08:00
• de0ef392ab build(deps-dev): bump simplecov from 1.2.0 to 1.3.0 (#474) dependabot[bot] 2026-09-16 07:50:00 +08:00
• cd4301ee40 build(deps-dev): bump simplecov from 1.1.1 to 1.2.0 (#472) dependabot[bot] 2026-09-11 08:55:19 +08:00
• d027510519 Readme doc badge (#471) david942jandClaude Opus 5 2026-09-07 00:47:53 +08:00
• 54c5db03b5 Release 2.1.1 (#470) v2.1.1 david942j 2026-09-05 20:55:19 +08:00
• 7cdd69ad1b Fix five typos in documentation comments (#469) david942j 2026-09-05 19:33:37 +08:00
• 84cff6fb10 Rebuild the gadgets for the libcs the gem does not ship (#468) david942j 2026-09-05 19:03:42 +08:00
• 29511b5b5b Stop telling current users to update (#467) david942j 2026-09-05 16:48:18 +08:00
• bd88eca008 Release 2.1.0 (#466) v2.1.0 david942j 2026-09-05 16:31:58 +08:00
• a0f26fc298 Require elftools 2.2.0 (#465) david942j 2026-09-05 16:20:38 +08:00
• 305d1a38b8 Say each change in fewer words, and link every PR (#464) david942j 2026-09-05 12:05:05 +08:00
• 7d1b0a9d32 Refine doc examples (#463) david942j 2026-09-05 11:34:17 +08:00
• 5ec0e2af3a Keep the GOT setup search inside the window it started in (#462) david942j 2026-09-05 10:21:04 +08:00
• f6a8967283 Ask a load segment where it is, rather than reading its header (#461) david942j 2026-09-05 01:52:59 +08:00
• 89aa5011db Report the gadgets a walk was throwing away when it ran out of budget (#460) david942j 2026-09-05 01:25:54 +08:00
• fd60e98007 Ask a symbol what it records, not the structure it is recorded in (#459) david942j 2026-09-04 22:37:22 +08:00
• c3fd20a7a2 Disassemble a quarter as much around each call (#457) david942j 2026-09-04 21:51:43 +08:00
• 90b696461c Ask a word what it could be before decoding it (#456) david942j 2026-09-04 21:48:00 +08:00
• 096d11499f Say which PR each change landed in (#458) david942j 2026-09-04 21:47:39 +08:00
• 6cdbedbd7f Answer a repeated search from what the first one found (#455) david942j 2026-09-04 20:15:08 +08:00
• 71b4776cab Ask objdump once, build the call pattern once (#454) david942j 2026-09-04 14:00:17 +08:00
• 9b6d567009 Find MIPS calls in the bytes, not in a full disassembly (#453) david942j 2026-09-04 01:02:57 +08:00
• 2a557f545c Aletheia MIPS (#452) david942j 2026-09-04 00:34:22 +08:00
• 247c2d3ba1 Refuse a MIPS window that opens on a call it never set up (#451) david942j 2026-09-04 00:30:03 +08:00
• 6fd2e6bfeb Refuse a MIPS window that follows a transfer it never executed (#450) david942j 2026-09-04 00:10:12 +08:00
• 691d770c2f State the slot a MIPS window restores its GOT base from (#449) david942j 2026-09-03 22:21:45 +08:00
• e9df151656 Find MIPS gadgets (#448) david942j 2026-09-03 01:13:27 +08:00
• cb70256331 Implement Fetchers::Mips with Emulators::Mips enhanced for delay slots (#447) david942j 2026-09-02 09:04:04 +08:00
• 8cc9e9421b Emulate MIPS instructions (#446) david942j 2026-09-01 21:30:07 +08:00
• e1dee04f9b Find call sites in a big-endian libc too (#445) david942j 2026-09-01 20:26:04 +08:00
• c994a34b40 Update README to reflect the latest project status (#444) david942j 2026-09-01 00:59:49 +08:00
• 49161034ba Drop the glibc 2.26 fixtures, which no LTS ships (#443) david942j 2026-09-01 00:43:14 +08:00
• 57719dea31 Require elftools 2.1.0 for its faster symbol read (#442) david942j 2026-09-01 00:27:18 +08:00
• f3d602a606 Read an arm libc that has no section headers (#441) david942j 2026-09-01 00:10:41 +08:00
• 0485657965 Write the name the engine reads when an address has several (#440) david942j 2026-08-31 23:17:40 +08:00
• b27a6f8090 Name a raw disassembly's branch targets on every architecture (#439) david942j 2026-08-31 22:53:16 +08:00
• 64ca1a11a7 Fail the build on a public method that hides its signature (#438) david942j 2026-08-31 09:34:36 +08:00
• 5c39021aa1 Say each thing where it belongs, once (#437) david942j 2026-08-31 00:19:46 +08:00
• 3d7714fa04 Document what a reader cannot infer (#436) david942j 2026-08-30 23:49:28 +08:00
• 6702447fb6 Write up Finding 8, and say why the numbering skips (#435) david942j 2026-08-30 23:27:20 +08:00
• 126a31a663 Candidates filter (#434) david942j 2026-08-30 23:14:20 +08:00
• b8e6569f9b Record stripped-libc support in the changelog (#433) david942j 2026-08-30 21:56:13 +08:00
• 06bd4f39eb Support reading stripped libc (#432) david942j 2026-08-30 20:51:22 +08:00
• f4fb654095 Fail the build on a doc comment that lost its definition (#431) david942j 2026-08-30 16:44:39 +08:00
• f151904766 Ship riscv64 builds (#430) david942j 2026-08-29 21:57:19 +08:00
• 6e695dbf87 Stop a plan calling a slot zero after writing to it (#429) david942j 2026-08-29 21:44:02 +08:00
• c1364e86a7 Envp scaled store (#428) david942j 2026-08-29 21:26:00 +08:00
• e115d6f522 Plan the constraints that left 30 gadgets unverified (#427) david942j 2026-08-29 20:54:21 +08:00
• c80fca8dc2 Announce riscv64 support (#426) david942j 2026-08-29 19:39:23 +08:00
• 1ebdbe460e Find riscv64's call sites without disassembling the whole libc (#425) david942j 2026-08-29 19:34:50 +08:00
• 7e8d8a1ef4 Verify riscv64 gadgets with Aletheia (#424) david942j 2026-08-29 19:20:33 +08:00
• 9d5def5813 Fold riscv64's bitwise operations and shifts (#423) david942j 2026-08-29 18:59:54 +08:00
• 59adaa3ed0 Turn a riscv64 branch into a gadget constraint (#422) david942j 2026-08-29 18:47:26 +08:00
• 22af047758 Emulate riscv64's loads and stores (#421) david942j 2026-08-29 18:28:47 +08:00
• 365db1fa8c Recognise riscv64, and emulate enough of it to find gadgets (#420) david942j 2026-08-29 18:19:21 +08:00
• 2e57181614 Give the $base-relative string hooks a default in Base (#419) david942j 2026-08-29 18:00:15 +08:00
• a5488aa000 Let a mnemonic carry a dot (#418) david942j 2026-08-29 17:47:51 +08:00
• 0b5aa48439 Split Fetchers::Base's three engine concerns into modules (#417) david942j 2026-08-29 17:21:39 +08:00
• da1a275d98 Split Processor's three self-contained concerns into modules (#416) david942j 2026-08-29 17:13:54 +08:00
• 425c059040 Move the architecture-neutral instruction helpers into Processor (#415) david942j 2026-08-29 16:55:45 +08:00
• e46883b773 Release 2.0.0 (#414) v2.0.0 david942jandClaude Opus 5 2026-08-29 11:29:34 +08:00
• fd62c67b40 Verify who is answering before running their code (#413) david942jandClaude Opus 5 2026-08-29 11:02:06 +08:00
• ca11669ba7 build(deps-dev): bump rubocop from 1.89.0 to 1.90.0 (#411) dependabot[bot] 2026-08-29 10:39:03 +08:00
• 515ab37c63 Builds drift (#412) david942jandClaude Opus 5 2026-08-29 10:37:46 +08:00
• 7314f41a58 Recognise an architecture by what the ELF says, not what a library calls it (#410) david942jandClaude Opus 5 2026-08-27 23:33:47 +08:00
• c1a916c3b3 Write down what changed, release by release (#409) david942jandClaude Opus 5 2026-08-25 20:26:14 +08:00
• fe38674c13 Run the two x86 instructions that stop a candidate for nothing (#408) david942jandClaude Opus 5 2026-08-25 08:00:06 +08:00
• 7c3678c59f Keep a sysroot only for a libc no newer than its own (#407) david942jandClaude Opus 5 2026-08-24 23:48:03 +08:00
• c3c11c7a2e Say when the shipped libcs have gone stale (#406) david942jandClaude Opus 5 2026-08-24 23:15:25 +08:00
• 44e4e68a69 Builds refresh (#405) david942jandClaude Opus 5 2026-08-24 10:39:35 +08:00
• 40dd84e102 Ask for the GOT base only where a caller can put it (#404) david942jandClaude Opus 5 2026-08-24 09:49:11 +08:00
• ac8b887ec8 Match a libc to its sysroot by what the libc says it is (#403) david942jandClaude Opus 5 2026-08-24 09:10:54 +08:00
• ac65a72df7 Level lookup consistency (#402) david942jandClaude Opus 5 2026-08-23 23:49:12 +08:00
• e863a2e173 Score a value required to be zero the same however it is spelled (#401) david942j 2026-08-23 22:13:06 +08:00
• 484244c20e Drop a comparison the pinned value already answers (#400) david942j 2026-08-23 21:21:04 +08:00
• b45c1786ba Project Aletheia - All gadgets are real (#399) david942jandClaude Opus 4.8 2026-08-23 16:25:42 +08:00
• 94d9178406 Keep walking past instructions that decide nothing (#398) david942j 2026-08-23 12:29:45 +08:00
• 85ea709116 Say what each output level shows, from files anyone has (#397) david942j 2026-08-22 23:29:34 +08:00
• c4ec39565f Ask whether an operand is a number without raising (#396) david942j 2026-08-22 13:39:13 +08:00
• fddf1f1464 Disassemble a libc's windows at the same time (#395) david942j 2026-08-22 13:36:30 +08:00
• 5d5d3a5f1d Read an instruction line once per architecture (#394) david942j 2026-08-22 08:02:50 +08:00
• 82485dc69b Scan call sites everywhere (#393) david942j 2026-08-22 00:07:42 +08:00
• e000f97a4f Nothing falls through into the first line of a window (#392) david942j 2026-08-21 23:50:37 +08:00
• 571a4c6105 Window past the call, where predecessors also live (#391) david942j 2026-08-21 23:43:29 +08:00
• 86a20e1dff Read arm's call sites out of the file, not one object at a time (#390) david942j 2026-08-21 18:56:50 +08:00
• 134f120861 Skip refused windows (#389) david942j 2026-08-21 08:32:21 +08:00
• 722ef9886b Stop redoing per-candidate work once per window (#388) david942j 2026-08-21 07:55:41 +08:00
• ad38e0aa6a Prune settled constraints (#387) david942j 2026-08-21 05:26:23 +08:00
• 3d64c6f40a Drop a gadget whose list meets an easier gadget's (#386) david942j 2026-08-20 23:21:52 +08:00
• 329d8d7e38 ARM GOT reseed (#385) david942j 2026-08-20 08:25:35 +08:00
• 9f676b23a5 Arm memory batch2 (#384) david942j 2026-08-19 23:37:12 +08:00
• 9694884264 build(deps-dev): bump simplecov from 1.1.0 to 1.1.1 (#383) dependabot[bot] 2026-08-18 07:44:09 +08:00
• c47a55861e Name the ARM registers as objdump prints them (#380) david942j 2026-08-16 15:33:20 -07:00
• 5c8d65e72c ARM ALU modelling (#379) david942j 2026-08-16 14:49:45 -07:00
• bbcb90b5ec Keep one store for everything a candidate writes (#378) david942j 2026-08-14 22:48:36 -07:00
• dacbef1ddb Score a masked value as the requirement it is (#377) david942j 2026-08-14 22:42:40 -07:00
• 994aeb726e build(deps-dev): bump simplecov from 1.0.3 to 1.1.0 (#376) dependabot[bot] 2026-08-15 13:17:57 +08:00
• 62c352f57f Track the argv a gadget builds through a derived pointer (#375) david942j 2026-08-14 01:57:33 -07:00