def concrete_run(prog, params): print "Starting concrete execution" m = Manticore(prog, params) # 'trace' will contain the executed instructions m.context['trace'] = [] # None: The hook will be applied to all the instructions @m.hook(None) def record_trace(state): pc = state.cpu.PC # Store the instruction with m.locked_context() as c: c['trace'] += [pc] m.run() # Print number of instructions recorded with m.locked_context() as c: print "%d instructions are recorded" % len(c['trace']) return c
#!/usr/bin/env python import sys from manticore import Manticore ''' Count the number of emulated instructions. This example uses the context property of the Manticore object to store data that's updated by the hook function. Manticore.context is needed to properly share data when running with multiple worker processes. ''' if __name__ == '__main__': if len(sys.argv) < 2: sys.stderr.write("Usage: %s [binary]\n"%(sys.argv[0],)) sys.exit(2) m = Manticore(sys.argv[1]) with m.locked_context() as context: context['count'] = 0 @m.hook(None) def explore(state): with m.locked_context() as context: context['count'] += 1 m.run(procs=3) print "Executed ", m.context['count'], " instructions."