angr.engines.ail

class angr.engines.ail.AILCallStack

Bases: CallStack

An implementation of state.callstack for AIL symbolic execution

Contains extra state for local vars and AIL calling conventions

__init__(*args, **kwargs)

copy_without_tail(memo)

class angr.engines.ail.AILMixin

Bases: SuccessorsEngine

The SuccessorsEngine mixin for providing AIL symbolic execution support

class angr.engines.ail.SimEngineAILSimState

Bases: SimEngineLightAIL[StateType, DataType, bool, None]

A light engine for symbolically executing AIL

__init__(project, successors)

Parameters:

• project (Project)

• successors (SimSuccessors)

process(state, *, block=None, whitelist=None, **kwargs)

Return type:

None

Parameters:

• state (StateType)

• block (Block | None)

• whitelist (set[int] | None)

property frame: AILCallStack

lift_addr(addr)

Return type:

Clinic

Parameters:

addr (int)

lift(state)

Return type:

Block

Parameters:

state (StateType | int | Address)

angr.engines.ail.ail_call_state(project, start_addr, args, lifter, mode='symbolic', options=None, add_options=None, remove_options=None, plugin_preset='default', memory_cls=None, callstack_cls=None)

Parameters:

• project (Project)

• start_addr (int | Address | str)

• args (Iterable[Bits])

• lifter (Callable[[int], Clinic])

• mode (str)

• options (set[str] | None)

• add_options (set[str] | None)

• remove_options (set[str] | None)

• plugin_preset (str)

• memory_cls (type[MemoryMixin] | None)

• callstack_cls (type[AILCallStack] | None)

Submodules

callstack
engine_light
engine_successors
setup