FuzzBALL binary symbolic execution tool now available

[Stephen McCamant]

Along with my BitBlaze colleagues I'm happy to announce that FuzzBALL,
a binary-level symbolic execution engine based on the BitBlaze Vine
library, is now available in source-code form. FuzzBALL can be applied
either to standalone binary code from any source, or to Linux binaries
by passing their system calls through to your host system, and it has
a number of features and options we have found useful in binary
analysis research.

The home page for FuzzBALL is at:

http://bitblaze.cs.berkeley.edu/fuzzball.html

and contains links to some papers which have built on it. The source
code for FuzzBALL is available under the GNU GPL, on GitHub at:

https://github.com/bitblaze-fuzzball/fuzzball

FuzzBALL's development and documentation are ongoing, and we are
interested to hear your comments, questions, and feedback, which you
can send here to the bitblaze-users mailing list.

-- Stephen

[Gustavo Grieco]

Great! I'm glad to hear that another binary tool was open sourced and i hope more are coming!

2013/6/17 Stephen McCamant <mcca...@cs.umn.edu>

 -- Stephen

--

---
You received this message because you are subscribed to the Google Groups "BitBlaze User Discussion group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitblaze-user...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[kamlesh...@gmail.com]

Hi Stephen,

When I am building the source it requires few Ocaml liberaries, And What I found that few liberaries depends on ocaml-base-nox-3.11.2 and few depends on ocaml-base-nox-3.12_xxx.

when I install once version of  ocaml-base-nox the other is getting replace. could you please help me in this. 

Your response is highly needed.

Thanks,

Kamlesh

[Stephen McCamant]

>>>>> "KP" == kamleshpatel <kamlesh...@gmail.com> writes:

KP> Hi Stephen,
KP> When I am building the source it requires few Ocaml liberaries,
KP> And What I found that few liberaries depends on
KP> *ocaml-base-nox-3.11.2* and few depends on
KP> *ocaml-base-nox-3.12_xxx.* when I install once version of
KP> *ocaml-base-nox *the other is getting replace. could you please
KP> help me in this.

You will want all of the OCaml libraries used by Vine to be based on
the same version of OCaml in any case, since you'll want to be using
them all in one program. Either 3.11 or 3.12 should work, but you
should be consistent.

In my experience Debian and Ubuntu are usually consistent in released
versions of their systems that all the OCaml packages are
compatible. So I think the most likely cause of this sort of problem
is that you're trying to mix packages from different versions of
Debian or Ubuntu on the same system. Though doing that is sometimes
possible, it can be tricky, so I wouldn't recommend it unless you feel
quite comfortable debugging package dependency problems yourself. What
version of Debian/Ubuntu do you intend to be running on this machine?

A tool I find convenient for this sort of problem is
"apt-show-versions" (in a package of the same name). If you run
"apt-show-versions -a ocaml-base-nox" it will show all the different
versions of that package that APT might consider installing, with the
distribution they came from. I would suggest choosing a consistent
distribution for your OCaml packages (if not for the whole
system). Comment out the conflicting distributions in
/etc/apt/sources.list, remove any incompatible versions if necessary,
and then reinstall all the OCaml packages with that distribution.

KP> $ sudo apt-get install binutils-dev
KP> Reading package lists... Done
KP> Building dependency tree
KP> Reading state information... Done
KP> You might want to run 'apt-get -f install' to correct these:
KP> The following packages have unmet dependencies:
KP> libextlib-ocaml-dev : Depends: libextlib-ocaml-swve0
KP> Recommends: ocaml-findlib but it is not going
KP> to be installed
KP> libgdome2-ocaml : Depends: ocaml-base-nox-3.11.2 but it is not installable
KP> libocamlgraph-ocaml-dev : Depends: ocaml-nox-3.11.2 but it is not
KP> installable
KP> E: Unmet dependencies. Try 'apt-get -f install' with no packages (or
KP> specify a solution).

This error has no connection to binutils-dev. Rather, APT has detected
that you've gotten your set of installed packages into an inconsistent
state, and it's refusing to make any more changes until you fix those
problems. As the final line of the error suggests, running "apt-get -f
install" with no other arguments will ask APT to try to change the set
of packages to fix the problem. If that fails, you can also tell APT
the specific packages you want to install or not install by listing
after "apt-get -f install": a plain package name means to install the
preferred version, while a suffix of "-" means to remove the package,
and you can also suffix with "/" and a distribution or "=" and a
version number.

It would also be possible to compile any of these OCaml libraries
yourself, but fixing your distribution problems would probably be
easier, so I'd recommend trying that first. Also if you're interested
only in FuzzBALL (and not in older/other Vine programs; I couldn't
tell from your emails), several of these libraries (OCamlGraph,
Sqlite, GDOME) are not needed for it.

Hope this helps,

-- Stephen

[maryam.m...@gmail.com]

Hi,
It would be kind of you to let me know if the other tools Rudder and BitFuzz source code is available.


Thank you

[Stephen McCamant]

>>>>> "MM" == maryam mouzarani <maryam.m...@gmail.com> writes:

MM> Hi,
MM> It would be kind of you to let me know if the other tools Rudder
MM> and BitFuzz source code is available.

No, sorry, the source code for these other symbolic execution tools is
not available at this time. But continuing to watch this mailing list
would be the best way to hear about any such release if it happens in
the future.