Heap Tracker

manticore/native/cpu/aarch64.py

@@ -5302,6 +5302,9 @@ def get_arguments(self):
         for address in self.values_from(self._cpu.STACK):
             yield address
 
+    def get_return_reg(self):
+        return "X0"
+
     def write_result(self, result):
         self._cpu.X0 = result
 

manticore/native/cpu/abstractcpu.py

@@ -294,6 +294,16 @@ def get_arguments(self):
         """
         raise NotImplementedError
 
+    def get_return_reg(self):
+        """
+        Extract the location a return value will be written to. Produces
+        a string describing a register where the return value is written to.
+
+        :return: return register name
+        :rtype: string
+        """
+        raise NotImplementedError
+
     def write_result(self, result):
         """
         Write the result of a model back to the environment.

manticore/native/cpu/arm.py

@@ -570,6 +570,9 @@ def get_arguments(self):
         for address in self.values_from(self._cpu.STACK):
             yield address
 
+    def get_return_reg(self):
+        return "R0"
+
     def write_result(self, result):
         self._cpu.R0 = result
 

manticore/native/cpu/x86.py

@@ -6412,6 +6412,9 @@ def get_arguments(self):
         for address in self.values_from(base):
             yield address
 
+    def get_return_reg(self):
+        return "EAX"
+
     def write_result(self, result):
         self._cpu.EAX = result
 
@@ -6464,6 +6467,9 @@ def get_arguments(self):
         for address in self.values_from(self._cpu.RSP + word_bytes):
             yield address
 
+    def get_return_reg(self):
+        return "RAX"
+
     def write_result(self, result):
         # XXX(yan): Can also return in rdx for wide values.
         self._cpu.RAX = result

manticore/native/heap_tracking/heap_syscalls.py

@@ -0,0 +1,20 @@
+i386 = {
+    "brk": 45,
+    "mmap": 192,  # sys_mmap_pgoff
+    "munmap": 91,
+}
+amd64 = {
+    "brk": 12,
+    "mmap": 9,
+    "munmap": 11,
+}
+armv7 = {
+    "brk": 45,
+    "mmap": 192,  # sys_mmap2
+    "munmap": 91,
+}
+aarch64 = {
+    "brk": 214,
+    "mmap": 222,
+    "munmap": 215,
+}