-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Description
Question
Hello angr team,
I'm working on a piece of code which requires knowing where and in what order the addresses of some globals were written into the same address of memory (and to where are they being written).
I would love to know whether such a thing is possible with angr and what the best way of achieving it is.
Ive tried looking at the VariableRecover and VariableRecoverFast analysis, but those don't appear to preserve what values were assigned to variables (although they do seem to recover global variables, but they don't seem to show accesses to those globals).
Ideally I would either be able to install a hook on a memory store operation of a symbolic execution, inspect if the value being stored is one of the ones I am interested and keep state about the store.
or alternatively getting a list of all accesses in execution order.
The access are usually not overly complex, only sometimes being passed as an offset from another global whose address was written to a different place.