What’s Changed with This Release:
What’s New:
- Added support for analyzing Java 8 bytecode to the Symbex analysis.
- Symbex analysis results are now reported with a confidence score.
What’s Updated:
- Reduced the length of basic block paths included with Symbex results.
- Improved Input to Reproduce section included with Symbex results.
- Code previews included with Symbex results.
- Bug fix: resolved several false positive Symbex results associated with ARM and MIPS samples.
- Bug fix: resolved several false positive Symbex results related to inaccurate standard procedure emulation.
- Bug fix: resolved crashes associated with large local VM deployments (those with a lot of memory).
Feature details
New Feature: Analyzing Java 8 bytecode
Added support for analyzing Java 8 bytecode to the Symbex analysis including assessments for null pointer exceptions, divide by zero errors, and array index out of bounds exceptions.
New Feature: Symbex Analysis Confidence Score
Symbex analysis results are now reported with a confidence score: “Certain” or “Uncertain”, indicating false positive potential.
Updated Feature: Basic Block Paths
Reduced the length of basic block paths included with Symbex results by compressing reported loop information, e.g., a -> b -> c Looped 5 Times.
Updated Feature: Input to Reproduce
Improved Input to Reproduce section included with Symbex results. Command line input is now ordered and converted into a copy/paste-able python string. Stdin and network input is now broken into multiple ordered packets. File reads now include file name, size, and content.
Updated Feature: Code Previews
Code previews included with Symbex results, including decompilation, disassembly, and VEX IR now report multiple functions encountered along the exploration path, instead of just the most recent.
