mirror of
https://github.com/trailofbits/manticore.git
synced 2026-10-12 02:23:44 +00:00
Eric Hennenfent
451965f03a
* Add black to CI tests I'd rather have blackening be an optional check, but this will work for now * Yep, messed up Travis Again, sorry about the commit spam * Bump accepted line length to 120 Going to auto-format at 100 but will allow 20% overruns * Blacken * Cap line length at 100 rip my undisciplined coding habits * update black on the fly if necessary * Ignore CC errors * Only check modified files * Only python files * Re-blacken post merge * Re-Blacken * Fix deleted files * Explicitly invoke python The +x must not have gotten commited * Forgot to blacken again Hoisted on my own petard * Re-blacken
68 lines
2.0 KiB
Python
68 lines
2.0 KiB
Python
from manticore.ethereum import Detector, ManticoreEVM
|
|
|
|
################ Script #######################
|
|
|
|
m = ManticoreEVM()
|
|
m.verbosity(3)
|
|
# And now make the contract account to analyze
|
|
# https://capturetheether.com/challenges/math/mapping/
|
|
source_code = """
|
|
pragma solidity ^0.4.21;
|
|
|
|
contract MappingChallenge {
|
|
bool public isComplete;
|
|
uint256[] map;
|
|
|
|
function set(uint256 key, uint256 value) public payable {
|
|
// Expand dynamic array as needed
|
|
if (map.length <= key) {
|
|
map.length = key + 1;
|
|
}
|
|
|
|
map[key] = value;
|
|
}
|
|
}
|
|
"""
|
|
print("Source code:\n", source_code)
|
|
|
|
|
|
class StopAtDepth(Detector):
|
|
""" This just aborts explorations that are too deep """
|
|
|
|
def will_start_run_callback(self, *args):
|
|
with self.manticore.locked_context("seen_rep", dict) as reps:
|
|
reps.clear()
|
|
|
|
def will_decode_instruction_callback(self, state, pc):
|
|
world = state.platform
|
|
with self.manticore.locked_context("seen_rep", dict) as reps:
|
|
item = (
|
|
world.current_transaction.sort == "CREATE",
|
|
world.current_transaction.address,
|
|
pc,
|
|
)
|
|
if not item in reps:
|
|
reps[item] = 0
|
|
reps[item] += 1
|
|
if reps[item] > 2:
|
|
state.abandon()
|
|
|
|
|
|
m.register_plugin(StopAtDepth())
|
|
|
|
owner_account = m.create_account(balance=1000)
|
|
user_account = m.create_account(balance=1000)
|
|
target_account = m.create_account(balance=1000)
|
|
contract_account = m.solidity_create_contract(source_code, owner=user_account)
|
|
|
|
contract_account.set(m.make_symbolic_value(name="A"), 1)
|
|
contract_account.set(m.make_symbolic_value(name="B"), 1)
|
|
|
|
for st in m.all_states:
|
|
flag_storage_slot = 0
|
|
flag_value = st.platform.get_storage_data(contract_account.address, flag_storage_slot)
|
|
if st.can_be_true(flag_value != 0):
|
|
print("Flag Found! Check ", m.workspace)
|
|
st.constraints.add(flag_value != 0)
|
|
m.generate_testcase(st, "Flag Found", "")
|