argotorg / argotorg/hevm

We shoud have an option to export all calldata to hit all branches

Open
#931 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Haskell
Stars
358
Forks
79
Avg merge
1d 1h
Merged PRs (30d)
6

Description

In talk with Alex from Recon, it came up that it would be very helpful to have an option to emit all calldatas to reach all endstates (also ones that aren't assert-fail). Of course not all can be computed within reasonable time, but the ones that can be, we should emit them. This because these calldatas can then be picked up as corpus elements for feedback-fuzzers such as Echidna, and used to further explore parts of the search space, that these fuzzers could otherwise not reach.

Ping @GalloDaSballo from getrecon.xyz

Contributor guide

No contributing guide indexed for this repository

Research direction

No file, test, or entry point is identified in the issue, so first locate the existing calldata and endstate emission path in hevm. Define how feasible calldata for all reachable endstates should be emitted and verify that the output can serve as corpus elements for feedback fuzzers such as Echidna.

Written by the indexing model from the issue text.

Assessment

Tech stack
haskell
Domain
testing
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.