Engine module

❱   Namespaces

namespace maat::env

Simulation of the external environment in which a process is run.

---

❱   Classes

class maat::callother::HandlerMap

A mapping between CALLOTHER occurences and their handler.

---

class maat::MaatEngine

The main engine class of the Maat framework. It is a wrapper around core components (lifter, memory engine, IR CPU, binary loader, environment simulation, etc) that enables to symbolically emulate a process.

---

struct maat::info::RegAccess

Struct holding information about a register access.

---

struct maat::info::MemAccess

Struct holding information about a memory access.

---

struct maat::info::Branch

Struct holding information about a regular or conditional branch operation.

---

class maat::info::Info

This class is used by the engine to make relevant information easily available to the user when it stops executing emulated code. The accessible information depends on the reason why the engine stopped. For instance if the engine encountered a breakpoint, the class will hold breakpoint related info, e.g register/memory that was read/written, path constraints that was encountered, etc.

---

class maat::PathManager

A class recording the constraints associated with the current execution path.

---

struct maat::SavedMemState

Struct used by snapshots to record previous contents of an overwritten memory area.

---

class maat::Settings

Tweakable settings and options for the engine.

---

class maat::Snapshot

Data container class used by the engine for snapshoting.

---

template<typename T>

class maat::SnapshotManager

Wrapper class to manage a list of snapshots.

---

❱   Enums

enum class Id { X86_RDTSC, X86_CPUID, X64_SYSCALL, X86_PMINUB, X86_INT, X86_LOCK, UNSUPPORTED }

Unique identifiers for CALLOTHER occurences in the IR.

---

enum class Stop { HOOK, SYMBOLIC_PC, SYMBOLIC_CODE, MISSING_FUNCTION, MISSING_SYSCALL, EXIT, INST_COUNT, ILLEGAL_INST, UNSUPPORTED_INST, ARITHMETIC_ERROR, ERROR, FATAL, NONE }

---

❱   Typedefs

using handler_t = std::add_pointer<void(MaatEngine&, const ir::Inst&, ir::ProcessedInst&)>::type

A handler that executes a CALLOTHER occurence properly.

---

using abstract_mem_chunk_t = std::vector<std::pair<Expr, uint8_t>>

(Internal) Used to record writes on abstract memory

---

using symbolic_mem_snapshot_t = unsigned int

(Internal) Used for snapshoting symbolic memory engine

---

❱   Functions

auto mnemonic_to_id(const std::string& mnemonic, Arch::Type arch) -> Id

Return the Id corresponding to the occurence of CALLOTHER in assembly instruction 'mnemonic'.

---

auto default_handler_map() -> HandlerMap

Return the default handler map for CALLOTHER occurences.

---

auto operator<<(std::ostream& os, const MemAccess& mem_access) -> std::ostream&

Print memory access info to a stream.

---

auto operator<<(std::ostream& os, const Branch& branch) -> std::ostream&

Print branch info to a stream.

---

❱   Enum documentation