EVM.SymExec

Documentation

sbytes32 :: Query [SWord 8]

Convenience functions for generating large symbolic byte strings

sbytes256 :: Query [SWord 8]

Convenience functions for generating large symbolic byte strings

sbytes512 :: Query [SWord 8]

Convenience functions for generating large symbolic byte strings

sbytes1024 :: Query [SWord 8]

Convenience functions for generating large symbolic byte strings

sbytes128 :: QueryT IO [SWord 8]

symAbiArg :: AbiType -> Query ([SWord 8], SWord 32)

Abstract calldata argument generation We don't assume input types are restricted to their proper range here; such assumptions should instead be given as preconditions. This could catch some interesting calldata mismanagement errors.

symCalldata :: Text -> [AbiType] -> [String] -> Query ([SWord 8], SWord 32)

Generates calldata matching given type signature, optionally specialized with concrete arguments. Any argument given as "symbolic" or omitted at the tail of the list are kept symbolic.

abstractVM :: Maybe (Text, [AbiType]) -> [String] -> ByteString -> StorageModel -> Query VM

loadSymVM :: ContractCode -> Storage -> StorageModel -> SAddr -> SymWord -> (Buffer, SWord 32) -> VM

interpret :: Fetcher -> Maybe Integer -> Stepper a -> StateT VM IO [a]

Interpreter which explores all paths at | branching points. | returns a list of possible final evm states

maxIterationsReached :: VM -> Maybe Integer -> Maybe Bool

type Precondition = VM -> SBool

type Postcondition = (VM, VM) -> SBool

checkAssert :: ContractCode -> Maybe Integer -> Maybe (Text, [AbiType]) -> [String] -> Query (Either (VM, [VM]) VM)

checkAssertions :: Postcondition

verifyContract :: ContractCode -> Maybe Integer -> Maybe (Text, [AbiType]) -> [String] -> StorageModel -> Precondition -> Maybe Postcondition -> Query (Either (VM, [VM]) VM)

pruneDeadPaths :: [VM] -> [VM]

verify :: VM -> Maybe Integer -> Maybe (BlockNumber, Text) -> Maybe Postcondition -> Query (Either (VM, [VM]) VM)

Symbolically execute the VM and check all endstates against the postcondition, if available. Returns `Right VM` if the postcondition can be violated, where VM is a prestate counterexample, or `Left (VM, [VM])`, a pair of prestate and post vm states.

equivalenceCheck :: ByteString -> ByteString -> Maybe Integer -> Maybe (Text, [AbiType]) -> Query (Either ([VM], [VM]) VM)

Compares two contract runtimes for trace equivalence by running two VMs and comparing the end states.

both' :: (a -> b) -> (a, a) -> (b, b)

showCounterexample :: VM -> Maybe (Text, [AbiType]) -> Query ()