Skip to content

Avoid panic when concretizing symbolic bytes#18

Open
trufae wants to merge 1 commit into
mainfrom
codex/propose-fix-for-strtod-vulnerability
Open

Avoid panic when concretizing symbolic bytes#18
trufae wants to merge 1 commit into
mainfrom
codex/propose-fix-for-strtod-vulnerability

Conversation

@trufae

@trufae trufae commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Motivation

  • Prevent a denial-of-service crash caused when concretizing symbolic memory bytes (via Solver::evalcon_to_u64) returns None and is unwrap()-ed during memory reads reachable from strtod/strtof simulators.

Description

  • Replace the panic-prone solver.evalcon_to_u64(d).unwrap() with solver.evalcon_to_u64(d).unwrap_or(0) in Memory::read_bytes so unconcretizable bytes fall back to 0 instead of causing a panic, preserving prior fallback semantics while removing the crash vector.

Testing

  • Ran cargo test -p radius2 --offline; the build/tests could not complete in this environment because boolector-sys's build script attempted to download Lingeling and curl failed with a CONNECT/403, so automated tests were not executable here.

Codex Task

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant