{"action":"created","issue":{"url":"https://api.github.com/repos/panda-re/panda/issues/269","repository_url":"https://api.github.com/repos/panda-re/panda","labels_url":"https://api.github.com/repos/panda-re/panda/issues/269/labels{/name}","comments_url":"https://api.github.com/repos/panda-re/panda/issues/269/comments","events_url":"https://api.github.com/repos/panda-re/panda/issues/269/events","html_url":"https://github.com/panda-re/panda/issues/269","id":303440168,"number":269,"title":"Segmentation fault in file_taint and tainted_branch","user":{"login":"davega996","id":23491869,"avatar_url":"https://avatars2.githubusercontent.com/u/23491869?v=4","gravatar_id":"","url":"https://api.github.com/users/davega996","html_url":"https://github.com/davega996","followers_url":"https://api.github.com/users/davega996/followers","following_url":"https://api.github.com/users/davega996/following{/other_user}","gists_url":"https://api.github.com/users/davega996/gists{/gist_id}","starred_url":"https://api.github.com/users/davega996/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davega996/subscriptions","organizations_url":"https://api.github.com/users/davega996/orgs","repos_url":"https://api.github.com/users/davega996/repos","events_url":"https://api.github.com/users/davega996/events{/privacy}","received_events_url":"https://api.github.com/users/davega996/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-08T11:02:06Z","updated_at":"2018-03-08T13:56:52Z","closed_at":null,"author_association":"NONE","body":"Hello, i wanted to create a simple analysis with file_taint and tainted_branch but always runs into a segmentation fault error even before the tainting starts it seems\r\n\r\n```\r\n~/panda/build/x86_64-softmmu/qemu-system-x86_64 -replay ~/Records/record_calculator_five_computation -m 2G -os windows-32-7 -panda syscalls2:profile=windows7_x86 -panda callstack_instr -panda file_taint:first_instr:131811493,pos,filename=calc.exe -panda tainted_branch \r\nos_familyno=1 bits=32 os_details=[7]\r\nPANDA[syscalls2] - adding argument profile=windows7_x86.\r\nPANDA[file_taint] - adding argument first_instr:131811493.\r\nPANDA[file_taint] - adding argument pos.\r\nPANDA[file_taint] - adding argument filename=calc.exe.\r\nInitializing plugin syscalls2\r\nsyscalls2: using profile for windows 7 x86 32-bit\r\nInitializing plugin callstack_instr\r\nInitializing plugin file_taint\r\ntaint_filename = [calc.exe]\r\npositional_labels = 1\r\nno_taint = 0\r\nend_label = 1000000\r\nfirst_instr = 0 \r\npanda_require: osi\r\nInitializing plugin osi\r\nOSI grabbing Windows introspection backend.\r\npanda_require: win7x86intro\r\nInitializing plugin win7x86intro\r\npanda_require: wintrospection\r\nInitializing plugin wintrospection\r\npanda_require: syscalls2\r\npanda_load_plugin: /home/davega/panda/build/x86_64-softmmu/panda/plugins/panda_syscalls2.so already loaded\r\npanda_require: wintrospection\r\npanda_load_plugin: /home/davega/panda/build/x86_64-softmmu/panda/plugins/panda_wintrospection.so already loaded\r\npanda_require: taint2\r\nInitializing plugin taint2\r\ntaint2: Propagating taint through pointer dereference ENABLED\r\ntaint2: taint ops inlining DISABLED\r\npanda_require: callstack_instr\r\npanda_load_plugin: /home/ubuntuForPanda/panda/build/x86_64-softmmu/panda/plugins/panda_callstack_instr.so already loaded\r\ntaint2: taint2_enable_taint\r\ntaint2: Allocating small fast_shad (0 bytes) using malloc @ 562b681f7b90.\r\ntaint2: Allocating small fast_shad (12800000 bytes) using malloc @ 7f61e665e010.\r\ntaint2: Allocating small fast_shad (256 bytes) using malloc @ 562b681f8920.\r\ntaint2: Allocating small fast_shad (2048 bytes) using malloc @ 562b681f90e0.\r\ntaint2: Allocating small fast_shad (685568 bytes) using malloc @ 7f61e65b6010.\r\ntaint2: LLVM optimizations DISABLED\r\ntaint2: Linking taint ops from /home/davega/panda/build/x86_64-softmmu/panda/plugins/panda_taint2_ops.bc\r\ntaint2: Done initializing taint transformation.\r\nSegmentation fault (core dumped)\r\n```\r\n\r\nI attached the snp file and the non-deterministic log file \r\nhttps://www.dropbox.com/s/n9m5575e19o4i6q/record_calculator_five_computation-rr-nondet.log?dl=0\r\n\r\nhttps://www.dropbox.com/s/jr7ls84g2tsu3aq/record_calculator_five_computation-rr-snp.zip?dl=0"},"comment":{"url":"https://api.github.com/repos/panda-re/panda/issues/comments/371493437","html_url":"https://github.com/panda-re/panda/issues/269#issuecomment-371493437","issue_url":"https://api.github.com/repos/panda-re/panda/issues/269","id":371493437,"user":{"login":"moyix","id":34380,"avatar_url":"https://avatars1.githubusercontent.com/u/34380?v=4","gravatar_id":"","url":"https://api.github.com/users/moyix","html_url":"https://github.com/moyix","followers_url":"https://api.github.com/users/moyix/followers","following_url":"https://api.github.com/users/moyix/following{/other_user}","gists_url":"https://api.github.com/users/moyix/gists{/gist_id}","starred_url":"https://api.github.com/users/moyix/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/moyix/subscriptions","organizations_url":"https://api.github.com/users/moyix/orgs","repos_url":"https://api.github.com/users/moyix/repos","events_url":"https://api.github.com/users/moyix/events{/privacy}","received_events_url":"https://api.github.com/users/moyix/received_events","type":"User","site_admin":false},"created_at":"2018-03-08T13:56:52Z","updated_at":"2018-03-08T13:56:52Z","author_association":"COLLABORATOR","body":"In your command line, `first_instr:131811493` should be `first_instr=131811493`. Currently it's getting set to the default value of 0, which tries to turn on taint at the very beginning of the replay, before (e.g.) RAM is available – this is something we should fix!"}}
{"actor":{"display_login":"moyix"}}