-
Notifications
You must be signed in to change notification settings - Fork 5
/
Copy pathMemoryInstance.js
95 lines (86 loc) · 2.79 KB
/
MemoryInstance.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
const page_size = 65536;
class MemoryInstance {
constructor(limits, bytes = undefined) {
this.limits = limits;
if (bytes == undefined) {
this.bytes = new Uint8Array(limits.min * page_size);
} else {
this.bytes = bytes;
}
this.taintDict = {};
}
receive_taint_variable(variable, idx) {
if (!variable.taint) {
return;
}
let keys = Object.keys(variable.taint);
for (let i = 0; i < keys.length; i++) {
if (variable.taint[keys[i]] > 0) {
this.taintDict[idx][keys[i]] |= variable.taint[keys[i]];
}
}
}
receive_direct_taint_variable(variable, idx) {
if (!variable.taint) {
return;
}
let keys = Object.keys(variable.taint);
for (let i = 0; i < keys.length; i++) {
if (variable.taint[keys[i]] > 0) {
//this.taint[keys[i]] |= 1;
this.taintDict[idx][keys[i]] |= variable.taint[keys[i]];
}
}
}
receive_indirect_taint_variable(variable, idx) {
if (!variable.taint) {
return;
}
let keys = Object.keys(variable.taint);
for (let i = 0; i < keys.length; i++) {
if (variable.taint[keys[i]] & 2) {
this.taintDict[idx][keys[i]] |= 2;
}
}
}
getTaint(idx) {
return this.taintDict[idx];
}
taintInit(idx) {
this.taintDict[idx] = {};
}
print() {
console.log("MEMORY: ");
let str = undefined;
let bytes = ['0', '0', '0', '0'];
let str_rep;
for(let i = 1; i < 65; i++) {
if (i % 4 == 1) {
if (str != undefined) {
if (this.taintDict[this.bytes.length - i + 1]) {
let taint = this.taintDict[this.bytes.length - i + 1];
console.log(str + '0x' + bytes[0] + bytes[1] + bytes[2] + bytes[3] + " taint: " + JSON.stringify(taint));
}
else {
console.log(str + '0x' + bytes[0] + bytes[1] + bytes[2] + bytes[3]);
}
}
if (i+3 < 16) {
str = "-0x0";
} else {
str = "-0x";
}
str += (i+3).toString(16) + ": ";
}
if (this.bytes[this.bytes.length-i] < 16) {
str_rep = "0";
} else {
str_rep = "";
}
str_rep += this.bytes[this.bytes.length-i].toString(16);
//console.log("A " + this.bytes[this.bytes.length-i]);
bytes[3 - ((i - 1) % 4)] = str_rep;
};
}
}
module.exports = MemoryInstance;