We shoud have an option to export all calldata to hit all branches
- Dominant language
- Haskell
- Stars
- 358
- Forks
- 79
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 6
Description
In talk with Alex from Recon, it came up that it would be very helpful to have an option to emit all calldatas to reach all endstates (also ones that aren't assert-fail). Of course not all can be computed within reasonable time, but the ones that can be, we should emit them. This because these calldatas can then be picked up as corpus elements for feedback-fuzzers such as Echidna, and used to further explore parts of the search space, that these fuzzers could otherwise not reach.
Ping @GalloDaSballo from getrecon.xyz
Contributor guide
No contributing guide indexed for this repository
Research direction
No file, test, or entry point is identified in the issue, so first locate the existing calldata and endstate emission path in hevm. Define how feasible calldata for all reachable endstates should be emitted and verify that the output can serve as corpus elements for feedback fuzzers such as Echidna.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- haskell
- Domain
- testing
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100