def process_dir(directory: str, args) -> Dict[str, FileReport]:
result = {}
c_printer = CPrinter()
for item in os.listdir(directory):
f_r: FileReport = FileReport()
if os.path.isdir(item):
if args.recursively:
process_dir(item, args)
else:
c_printer.warn(
"not specify -R option, skipping subdirectory '{}'".format(
item))
else:
if os.path.splitext(item)[-1][1:] != args.extension:
c_printer.warn("file '{0}' extension mismatch".format(item))
c_printer.warn("skipping '{0}'".format(item))
continue
with open(os.path.join(directory, item)) as file:
c_printer.info("start analyzing {0}".format(
os.path.join(directory, item)))
try:
if args.source:
bytecodes = utils.compile_sol(
os.path.join(directory, item), args.t_runtime)
else:
bytecodes = ''.join(file.readlines())
for contract_name, bytecode in bytecodes:
if args.result is not None:
filename = os.path.join(
args.result,
os.path.split(directory)[0], item + ".txt")
f_printer = FPrinter(filename=filename)
c_r = analyze(bytecode, contract_name, f_printer)
f_r.add(c_r)
else:
c_r = analyze(bytecode, contract_name, c_printer)
f_r.add(c_r)
except AttributeError as e:
c_printer.error(str(e))
traceback.print_exc()
c_printer.warn("fail to analyze {0}".format(
os.path.join(directory, item)))
except AnalyzerException as e:
c_printer.warn("Unsupported feature: {}".format(e))
c_printer.warn("fail to analyze {0}".format(
os.path.join(directory, item)))
except TimeoutException:
c_printer.warn("Analyze timeout")
c_printer.warn("fail to analyze {0}".format(
os.path.join(directory, item)))
except Exception as e:
c_printer.error("SmSymer internal Error: {}".format(e))
traceback.print_exc()
c_printer.warn("fail to analyze {0}".format(
os.path.join(directory, item)))
else:
c_printer.info("finish analyzing {0}".format(
os.path.join(directory, item)))
result[os.path.join(directory, item)] = f_r
return result
def test_reentrancy2():
cwd = getcwd()
file = path.join(cwd, 'reentrancy2.sol')
_, bytecodes = utils.compile_sol(file)[0]
instructions = disasm(bytecodes)
symer = Analyzer(instructions)
assert symer.body_cfg.check_reentrancy()["vulnerable"]
def test_timestamp_dependency0():
cwd = getcwd()
file = path.join(cwd, 'timestamp_dependency0.sol')
_, bytecodes = utils.compile_sol(file)[0]
instructions = disasm(bytecodes)
symer = Analyzer(instructions)
assert symer.body_cfg.check_timestamp_dependency()["vulnerable"]
def test_unchecked_call1():
cwd = getcwd()
file = path.join(cwd, 'unchecked_call1.sol')
_, bytecodes = utils.compile_sol(file)[0]
instructions = disasm(bytecodes)
symer = Analyzer(instructions)
assert not symer.body_cfg.check_unchecked_call()["vulnerable"]
def process_dir(directory: str, args):
c_printer = CPrinter()
for item in os.listdir(directory):
if os.path.isdir(item):
if args.recursively:
process_dir(item, args)
else:
c_printer.warn(
"not specify -R option, skipping subdirectory '{}'".format(
item))
else:
if os.path.splitext(item)[-1][1:] != args.extension:
c_printer.warn("file '{0}' extension mismatch".format(item))
c_printer.warn("skipping '{0}'".format(item))
continue
with open(os.path.join(directory, item)) as file:
c_printer.info("start disassembling {0}".format(
os.path.join(directory, item)))
try:
if args.source:
_, bytecode = utils.compile_sol(
os.path.join(directory, item))[0]
else:
bytecode = ''.join(file.readlines())
if args.result is not None:
filename = os.path.join(args.result,
os.path.split(directory)[0],
item + ".asm")
f_printer = FPrinter(filename=filename)
f_printer.print(disasm(bytecode))
else:
c_printer.print(disasm(bytecode))
except AttributeError as e:
c_printer.error(str(e))
c_printer.info("fail to disassemble {0}".format(
os.path.join(directory, item)))
else:
c_printer.info("finish disassembling {0}".format(
os.path.join(directory, item)))
def process(args):
c_printer = CPrinter()
result = {}
if args.result is not None:
if not os.path.exists(args.result):
c_printer.error(
"Result output directory '{0}' does not exist".format(
args.result))
sys.exit(-1)
if not os.path.isdir(args.result):
c_printer.error("'{0}' is not a directory".format(args.result))
sys.exit(-1)
if args.file:
if args.source and args.extension is None:
args.extension = 'sol'
elif args.bytecode and args.extension is None:
args.extension = 'hex'
c_printer.info("processing files with extension '{0}'".format(
args.extension))
for s in args.input:
f_r = FileReport()
if os.path.splitext(s)[-1][1:] != args.extension:
c_printer.warn("file '{0}' extension mismatch".format(s))
c_printer.warn("skipping '{0}'".format(s))
continue
if not os.path.exists(s):
c_printer.error("file '{0}' does not exist".format(s))
c_printer.warn("skipping '{0}'".format(s))
elif not os.path.isfile(s):
c_printer.error("'{0}' is not a file".format(s))
c_printer.warn("skipping '{0}'".format(s))
else:
with open(s) as file:
c_printer.info("start analyzing {0}".format(s))
try:
if args.source:
bytecodes = utils.compile_sol(s, args.t_runtime)
else:
bytecodes = ''.join(file.readlines())
for contract_name, bytecode in bytecodes:
if args.result is not None:
filename = os.path.splitext(s)[0] + ".txt"
f_printer = FPrinter(filename=os.path.join(
args.result, filename))
c_r = analyze(bytecode, contract_name,
f_printer)
else:
c_r = analyze(bytecode, contract_name,
c_printer)
f_r.add(c_r)
except AttributeError as e:
c_printer.error(str(e))
c_printer.warn("fail to analyze {0}".format(s))
except AnalyzerException as e:
c_printer.warn("Unsupported feature: {}".format(e))
c_printer.warn("fail to analyze {0}".format(s))
except TimeoutException:
c_printer.warn("Analyze timeout")
c_printer.warn("fail to analyze {0}".format(s))
except Exception as e:
c_printer.error("SmSymer internal Error: {}".format(e))
c_printer.warn("fail to analyze {0}".format(s))
else:
c_printer.info("finish analyzing {0}".format(s))
result[s] = f_r
elif args.dir:
if args.source and args.extension is None:
args.extension = 'sol'
elif args.bytecode and args.extension is None:
args.extension = 'hex'
c_printer.info("processing files with extension '{0}'".format(
args.extension))
for s in args.input:
if not os.path.exists(s):
c_printer.error("directory '{0}' does not exist")
c_printer.warn("skipping '{0}'")
elif not os.path.isdir(s):
c_printer.error("'{0}' is not a directory")
c_printer.warn("skipping '{0}'")
else:
f_r = process_dir(s, args)
result.update(f_r)
else:
for i, s in enumerate(args.input):
bytecode = s
c_printer.info("start analyzing {0}".format(s))
f_r = FileReport()
try:
if args.result is not None:
filename = str(i) + ".txt"
f_printer = FPrinter(
filename=os.path.join(args.result, filename))
c_r = analyze(bytecode, '', f_printer)
else:
c_r = analyze(bytecode, '', c_printer)
f_r.add(c_r)
except AttributeError as e:
c_printer.error(str(e))
c_printer.warn("fail to analyze {0}".format(s))
except AnalyzerException as e:
c_printer.warn("Unsupported feature: {}".format(e))
c_printer.warn("fail to analyze {0}".format(s))
except TimeoutException:
c_printer.warn("Analyze timeout")
c_printer.warn("fail to analyze {0}".format(s))
except Exception as e:
c_printer.error("SmSymer internal Error: {}".format(e))
c_printer.warn("fail to analyze {0}".format(s))
else:
c_printer.info("finish analyzing {0}".format(s))
result[i] = f_r
# t_result_file = "/home/troublor/Desktop/result/t_contracts"
# t_r_printer = FPrinter(t_result_file)
# u_result_file = "/home/troublor/Desktop/result/u_contracts"
# u_r_printer = FPrinter(u_result_file)
# r_result_file = "/home/troublor/Desktop/result/r_contracts"
# r_r_printer = FPrinter(r_result_file)
c_printer.info("***********************************")
f_total = 0
f_success = 0
c_total = 0
c_success = 0
n_td = 0
n_td_f = 0
n_uc = 0
n_r = 0
for filename, f_r in result.items():
f_total += 1
if f_r.success:
f_success += 1
has_timestamp = False
for c_r in f_r.c_reports:
c_total += 1
if c_r.success:
c_success += 1
for cfg_r in c_r.cfg_reports:
if cfg_r.n_timestamp_dependency > 0:
n_td += 1
has_timestamp = True
# t_r_printer.print(filename)
break
for cfg_r in c_r.cfg_reports:
if cfg_r.n_unchecked_call > 0:
n_uc += 1
# u_r_printer.print(filename)
break
for cfg_r in c_r.cfg_reports:
if cfg_r.n_reentrancy > 0:
n_r += 1
# r_r_printer.print(filename)
break
if has_timestamp:
n_td_f += 1
c_printer.info("SmSymer analyzed {0} files".format(f_total))
c_printer.info("{0} success files, containing {1} contracts".format(
f_success, c_total))
c_printer.info("{0} success analyzed contracts".format(c_success))
c_printer.info(
"{0} contracts contains Timestamp Dependency Vulnerability".format(
n_td))
c_printer.info(
"{0} contracts contains Unchecked Call Vulnerability".format(n_uc))
c_printer.info(
"{0} contracts contains Reentrancy Vulnerability".format(n_r))
c_printer.info(
"{0} files contains Timestamp Dependency Vulnerability".format(n_td_f))
def process(args):
c_printer = CPrinter()
if args.result is not None:
if not os.path.exists(args.result):
c_printer.error(
"Result output directory '{0}' does not exist".format(
args.result))
sys.exit(-1)
if not os.path.isdir(args.result):
c_printer.error("'{0}' is not a directory".format(args.result))
sys.exit(-1)
if args.file:
if args.source and args.extension is None:
args.extension = 'sol'
elif args.bytecode and args.extension is None:
args.extension = 'hex'
c_printer.info("processing files with extension '{0}'".format(
args.extension))
for s in args.input:
if os.path.splitext(s)[-1][1:] != args.extension:
c_printer.warn("file '{0}' extension mismatch".format(s))
c_printer.warn("skipping '{0}'".format(s))
continue
if not os.path.exists(s):
c_printer.error("file '{0}' does not exist".format(s))
c_printer.warn("skipping '{0}'".format(s))
elif not os.path.isfile(s):
c_printer.error("'{0}' is not a file".format(s))
c_printer.warn("skipping '{0}'".format(s))
else:
with open(s) as file:
c_printer.info("start disassembling {0}".format(s))
try:
if args.source:
_, bytecode = utils.compile_sol(s)[0]
else:
bytecode = ''.join(file.readlines())
if args.result is not None:
filename = os.path.splitext(s)[0] + ".asm"
f_printer = FPrinter(
filename=os.path.join(args.result, filename))
f_printer.print(disasm(bytecode))
else:
c_printer.print(disasm(bytecode))
except AttributeError as e:
c_printer.error(str(e))
c_printer.info("fail to disassemble {0}".format(s))
else:
c_printer.info("finish disassembling {0}".format(s))
elif args.dir:
if args.source and args.extension is None:
args.extension = 'sol'
elif args.bytecode and args.extension is None:
args.extension = 'hex'
c_printer.info("processing files with extension '{0}'".format(
args.extension))
for s in args.input:
if not os.path.exists(s):
c_printer.error("directory '{0}' does not exist")
c_printer.warn("skipping '{0}'")
elif not os.path.isdir(s):
c_printer.error("'{0}' is not a directory")
c_printer.warn("skipping '{0}'")
else:
process_dir(s, args)
else:
for i, s in enumerate(args.input):
bytecode = s
c_printer.info("start disassembling {0}".format(s))
try:
if args.result is not None:
filename = str(i) + ".asm"
f_printer = FPrinter(
filename=os.path.join(args.result, filename))
f_printer.print(disasm(bytecode))
else:
c_printer.print(disasm(bytecode))
except AttributeError as e:
c_printer.error(str(e))
c_printer.info("fail to disassemble {0}".format(s))
else:
c_printer.info("finish disassembling {0}".format(s))