{"action":"created","issue":{"url":"https://api.github.com/repos/airbus-seclab/bincat/issues/77","repository_url":"https://api.github.com/repos/airbus-seclab/bincat","labels_url":"https://api.github.com/repos/airbus-seclab/bincat/issues/77/labels{/name}","comments_url":"https://api.github.com/repos/airbus-seclab/bincat/issues/77/comments","events_url":"https://api.github.com/repos/airbus-seclab/bincat/issues/77/events","html_url":"https://github.com/airbus-seclab/bincat/issues/77","id":363152108,"node_id":"MDU6SXNzdWUzNjMxNTIxMDg=","number":77,"title":"interpreter: unreachable state at address 0x754d76","user":{"login":"killpy","id":14991217,"node_id":"MDQ6VXNlcjE0OTkxMjE3","avatar_url":"https://avatars2.githubusercontent.com/u/14991217?v=4","gravatar_id":"","url":"https://api.github.com/users/killpy","html_url":"https://github.com/killpy","followers_url":"https://api.github.com/users/killpy/followers","following_url":"https://api.github.com/users/killpy/following{/other_user}","gists_url":"https://api.github.com/users/killpy/gists{/gist_id}","starred_url":"https://api.github.com/users/killpy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/killpy/subscriptions","organizations_url":"https://api.github.com/users/killpy/orgs","repos_url":"https://api.github.com/users/killpy/repos","events_url":"https://api.github.com/users/killpy/events{/privacy}","received_events_url":"https://api.github.com/users/killpy/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-09-24T13:42:47Z","updated_at":"2018-09-25T15:52:16Z","closed_at":null,"author_association":"NONE","body":"```\r\nINFO:bincat.gui:Launching the analyzer\r\nWARNING:bincat.gui:This file format is not natively supported byBinCAT, you should probably remap the binary.\r\nINFO:bincat.plugin:Current analyzer path: c:\\users\\admini~1\\appdata\\local\\temp\\tmpirlta9bincat\r\nERROR:bincat.plugin.npkgen:Error encountered while running gcc. Is it installed in PATH?\r\nWARNING:bincat.plugin:Could not compile header file, types from IDB will not be used for type propagation\r\nWARNING:bincat.plugin:.no file containing type data for the file being analyzed could not be generated, continuing. The ida-generated header could be invalid.\r\nINFO:bincat.plugin:Analyzer: starting process\r\nINFO:bincat.plugin:Analyzer started.\r\nINFO:bincat.plugin:Analyzer process finished\r\nINFO:bincat.plugin:---- stdout ----------------\r\nINFO:bincat.plugin:BinCAT v0.9\r\n\r\nINFO:bincat.plugin:---- stderr ----------------\r\nINFO:bincat.plugin:\r\nINFO:bincat.plugin:---- logfile ---------------\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: at S0x18e2fc: inferred type is ?\r\nINFO:bincat.plugin:[INFO2] interpreter: ################### 0x44541a\r\nINFO:bincat.plugin:[DEBUG] mapped_mem: read 16 bytes at 0x44541a: [89 48 0c c7 00 dc 82 c4 00 c3 90 90 90 90 90 90]\r\nINFO:bincat.plugin:[TRACE] 0x44541a: [ (32)[(eax + SignExtension (32) 0xc)] <- ecx; ]\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp(ecx)\r\nINFO:bincat.plugin:[DEBUG] unrel: span_taint(ecx) v=0x0\r\nINFO:bincat.plugin:[INFO2] unrel: (set) (32)[(eax + SignExtension (32) 0xc)] = ecx (0x0)\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((eax + SignExtension (32) 0xc))\r\nINFO:bincat.plugin:[DEBUG] unrel: write_in_mem (S0x18e300, 0x0, 32)\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: set_type (32)[(eax + SignExtension (32) 0xc)] ?\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((eax + SignExtension (32) 0xc))\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: at S0x18e300: inferred type is ?\r\nINFO:bincat.plugin:[INFO2] interpreter: ################### 0x44541d\r\nINFO:bincat.plugin:[DEBUG] mapped_mem: read 16 bytes at 0x44541d: [c7 00 dc 82 c4 00 c3 90 90 90 90 90 90 90 90 90]\r\nINFO:bincat.plugin:[TRACE] 0x44541d: [ (32)[eax] <- 0xc482dc; ]\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp(0xc482dc)\r\nINFO:bincat.plugin:[DEBUG] unrel: span_taint(0xc482dc) v=0xc482dc\r\nINFO:bincat.plugin:[INFO2] unrel: (set) (32)[eax] = 0xc482dc (0xc482dc)\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp(eax)\r\nINFO:bincat.plugin:[DEBUG] unrel: write_in_mem (S0x18e2f4, 0xc482dc, 32)\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: set_type (32)[eax] ?\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp(eax)\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: at S0x18e2f4: inferred type is ?\r\nINFO:bincat.plugin:[INFO2] interpreter: ################### 0x445423\r\nINFO:bincat.plugin:[DEBUG] mapped_mem: read 16 bytes at 0x445423: [c3 90 90 90 90 90 90 90 90 90 90 90 90 8b 44 24]\r\nINFO:bincat.plugin:[TRACE] 0x445423: [ ret,\r\nINFO:bincat.plugin:[TRACE] 0x445423: esp <- (esp + 0x4); ]\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((32)[esp])\r\nINFO:bincat.plugin:[DEBUG] unrel: get_mem_value : S0x18e2b4 32\r\nINFO:bincat.plugin:[DEBUG] unrel: get_mem_value result : 0x754d52\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((esp + 0x4))\r\nINFO:bincat.plugin:[DEBUG] unrel: span_taint((esp + 0x4)) v=S0x18e2b8\r\nINFO:bincat.plugin:[INFO2] unrel: (set) esp = (esp + 0x4) (S0x18e2b8)\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: set_type esp ?\r\nINFO:bincat.plugin:[INFO2] interpreter: ################### 0x754d52\r\nINFO:bincat.plugin:[DEBUG] mapped_mem: read 16 bytes at 0x754d52: [c7 44 24 18 60 9c c6 00 c7 44 24 1c 4f 00 00 00]\r\nINFO:bincat.plugin:[TRACE] 0x754d52: [ (32)[(esp + 0x18)] <- 0xc69c60; ]\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp(0xc69c60)\r\nINFO:bincat.plugin:[DEBUG] unrel: span_taint(0xc69c60) v=0xc69c60\r\nINFO:bincat.plugin:[INFO2] unrel: (set) (32)[(esp + 0x18)] = 0xc69c60 (0xc69c60)\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((esp + 0x18))\r\nINFO:bincat.plugin:[DEBUG] unrel: write_in_mem (S0x18e2d0, 0xc69c60, 32)\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: set_type (32)[(esp + 0x18)] ?\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((esp + 0x18))\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: at S0x18e2d0: inferred type is ?\r\nINFO:bincat.plugin:[INFO2] interpreter: ################### 0x754d5a\r\nINFO:bincat.plugin:[DEBUG] mapped_mem: read 16 bytes at 0x754d5a: [c7 44 24 1c 4f 00 00 00 8a 44 24 5c 8b 8d d8 02]\r\nINFO:bincat.plugin:[TRACE] 0x754d5a: [ (32)[(esp + 0x1c)] <- 0x4f; ]\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp(0x4f)\r\nINFO:bincat.plugin:[DEBUG] unrel: span_taint(0x4f) v=0x4f\r\nINFO:bincat.plugin:[INFO2] unrel: (set) (32)[(esp + 0x1c)] = 0x4f (0x4f)\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((esp + 0x1c))\r\nINFO:bincat.plugin:[DEBUG] unrel: write_in_mem (S0x18e2d4, 0x4f, 32)\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: set_type (32)[(esp + 0x1c)] ?\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((esp + 0x1c))\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: at S0x18e2d4: inferred type is ?\r\nINFO:bincat.plugin:[INFO2] interpreter: ################### 0x754d62\r\nINFO:bincat.plugin:[DEBUG] mapped_mem: read 16 bytes at 0x754d62: [8a 44 24 5c 8b 8d d8 02 00 00 8b 15 20 46 de 00]\r\nINFO:bincat.plugin:[TRACE] 0x754d62: [ eax[0, 7] <- (8)[(esp + 0x5c)]; ]\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((8)[(esp + 0x5c)])\r\nINFO:bincat.plugin:[DEBUG] unrel: get_mem_value : S0x18e314 8\r\nINFO:bincat.plugin:[DEBUG] unrel: get_mem_value result : 0x0\r\nINFO:bincat.plugin:[DEBUG] unrel: span_taint((8)[(esp + 0x5c)]) v=0x0\r\nINFO:bincat.plugin:[INFO2] unrel: (set) eax[0, 7] = (8)[(esp + 0x5c)] (0x0)\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((esp + 0x5c))\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: set_type eax[0, 7] ?\r\nINFO:bincat.plugin:[INFO2] interpreter: ################### 0x754d66\r\nINFO:bincat.plugin:[DEBUG] mapped_mem: read 16 bytes at 0x754d66: [8b 8d d8 02 00 00 8b 15 20 46 de 00 88 44 24 20]\r\nINFO:bincat.plugin:[TRACE] 0x754d66: [ ecx <- (32)[(ebp + 0x2d8)]; ]\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((32)[(ebp + 0x2d8)])\r\nINFO:bincat.plugin:[DEBUG] unrel: get_mem_value : 0x66e9168 32\r\nINFO:bincat.plugin:[DEBUG] unrel: get_mem_value result : 0x3e3fc90\r\nINFO:bincat.plugin:[DEBUG] unrel: span_taint((32)[(ebp + 0x2d8)]) v=0x3e3fc90\r\nINFO:bincat.plugin:[INFO2] unrel: (set) ecx = (32)[(ebp + 0x2d8)] (0x3e3fc90)\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((ebp + 0x2d8))\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: set_type ecx ?\r\nINFO:bincat.plugin:[INFO2] interpreter: ################### 0x754d6c\r\nINFO:bincat.plugin:[DEBUG] mapped_mem: read 16 bytes at 0x754d6c: [8b 15 20 46 de 00 88 44 24 20 89 4c 24 24 89 5c]\r\nINFO:bincat.plugin:[TRACE] 0x754d6c: [ edx <- (32)[0xde4620]; ]\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((32)[0xde4620])\r\nINFO:bincat.plugin:[DEBUG] unrel: get_mem_value : 0xde4620 32\r\nINFO:bincat.plugin:[DEBUG] unrel: \tNot found in mapping, checking sections\r\nINFO:bincat.plugin:== (same line repeated 4 times) ==\r\nINFO:bincat.plugin:[DEBUG] mapped_mem: read byte 00\r\nINFO:bincat.plugin:[DEBUG] unrel: get_mem_value result : 0x0\r\nINFO:bincat.plugin:[DEBUG] unrel: span_taint((32)[0xde4620]) v=0x0\r\nINFO:bincat.plugin:[INFO2] unrel: (set) edx = (32)[0xde4620] (0x0)\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp(0xde4620)\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: set_type edx ?\r\nINFO:bincat.plugin:[INFO2] interpreter: ################### 0x754d72\r\nINFO:bincat.plugin:[DEBUG] mapped_mem: read 16 bytes at 0x754d72: [88 44 24 20 89 4c 24 24 89 5c 24 54 8b 42 1c 8b]\r\nINFO:bincat.plugin:[TRACE] 0x754d72: [ (8)[(esp + 0x20)] <- eax[0, 7]; ]\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp(eax[0, 7])\r\nINFO:bincat.plugin:[DEBUG] unrel: span_taint(eax[0, 7]) v=B0x_\r\nINFO:bincat.plugin:[INFO2] unrel: (set) (8)[(esp + 0x20)] = eax[0, 7] (B0x_)\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: set_type (8)[(esp + 0x20)] ?\r\nINFO:bincat.plugin:[DEBUG] unrel: eval_exp((esp + 0x20))\r\nINFO:bincat.plugin:[DEBUG] reduced_unrel_typenv: at S0x18e2d8: inferred type is ?\r\nINFO:bincat.plugin:[ANALYSIS] interpreter: unreachable state at address 0x754d76\r\nINFO:bincat.plugin:[STOP] stopped after 0x754d72\r\nINFO:bincat.plugin:====== end of logfile ======\r\nINFO:bincat.plugin:Storing analysis results to idb...\r\nINFO:bincat.plugin:Analysis results have been stored idb.\r\n```\r\n![2](https://user-images.githubusercontent.com/14991217/45955454-882fab00-c042-11e8-88e1-df3b4db3cab9.png)\r\n![3](https://user-images.githubusercontent.com/14991217/45955457-8d8cf580-c042-11e8-9b83-27e846e5cb3d.png)\r\nI have set up stack memory. How can this problem arise?"},"comment":{"url":"https://api.github.com/repos/airbus-seclab/bincat/issues/comments/424399084","html_url":"https://github.com/airbus-seclab/bincat/issues/77#issuecomment-424399084","issue_url":"https://api.github.com/repos/airbus-seclab/bincat/issues/77","id":424399084,"node_id":"MDEyOklzc3VlQ29tbWVudDQyNDM5OTA4NA==","user":{"login":"phil777","id":1108574,"node_id":"MDQ6VXNlcjExMDg1NzQ=","avatar_url":"https://avatars3.githubusercontent.com/u/1108574?v=4","gravatar_id":"","url":"https://api.github.com/users/phil777","html_url":"https://github.com/phil777","followers_url":"https://api.github.com/users/phil777/followers","following_url":"https://api.github.com/users/phil777/following{/other_user}","gists_url":"https://api.github.com/users/phil777/gists{/gist_id}","starred_url":"https://api.github.com/users/phil777/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/phil777/subscriptions","organizations_url":"https://api.github.com/users/phil777/orgs","repos_url":"https://api.github.com/users/phil777/repos","events_url":"https://api.github.com/users/phil777/events{/privacy}","received_events_url":"https://api.github.com/users/phil777/received_events","type":"User","site_admin":false},"created_at":"2018-09-25T15:52:16Z","updated_at":"2018-09-25T15:52:16Z","author_association":"MEMBER","body":"Hello,\r\n\r\nThe logs were overwhelmed by initialization stuff. It reached 1Mo and it was far from the interesting part.\r\n \r\nSorry to ask you to do it again, but could you send us the logs with\r\n```\r\nloglevel = 6\r\nloglevel vector = 5\r\n```\r\n\r\nThanks for your time!"}}
{"actor":{"display_login":"phil777"}}