-
12 | *
- Name 13 | *
- Type 14 | *
- Components (currently ignored) 15 | *
API
Address: " + address + "Name: " + name; 29 | }*/ 30 | 31 | @GetMapping 32 | public String getRequest(@RequestParam String address, @RequestParam(required = false) String name){ 33 | Response response; 34 | if (name == null) 35 | name = "Contract" + CONTACT_COUNTER.getAndIncrement(); 36 | response = AddressProcessor.process(name, address); 37 | return gson.toJson(response); 38 | } 39 | 40 | @PostMapping(consumes = "application/json", produces = "application/json") 41 | public String postRequest(@RequestBody String requestBody){ 42 | PostRequestBody parsedRequestBody; 43 | parsedRequestBody = gson.fromJson(requestBody, PostRequestBody.class); 44 | // System.out.println(String.format("address:%s\nbytecode:%s\nisOnlyRuntime%s\n", parsedRequestBody.getAddress(), parsedRequestBody.getBytecode(), parsedRequestBody.isOnlyRuntime())); 45 | Response response; 46 | 47 | String name; 48 | if (parsedRequestBody.getName() == null) 49 | name = "Contract" + CONTACT_COUNTER.getAndIncrement(); 50 | else 51 | name = parsedRequestBody.getName(); 52 | 53 | if (parsedRequestBody.getAddress() != null) 54 | response = AddressProcessor.process(name, parsedRequestBody.getAddress()); 55 | else if (parsedRequestBody.getBytecode() != null) 56 | response = BytecodeProcessor.process(name, parsedRequestBody.getBytecode(), parsedRequestBody.isOnlyRuntime()); 57 | else 58 | response = MISSING_INVALID_PARAMS_ERROR; 59 | return gson.toJson(response); 60 | } 61 | 62 | @ExceptionHandler({MissingServletRequestParameterException.class, IllegalStateException.class}) 63 | public String requestFormatError() { 64 | return gson.toJson(MISSING_INVALID_PARAMS_ERROR); 65 | } 66 | } 67 | 68 | -------------------------------------------------------------------------------- /Core/src/test/java/parseTree/SymbolicExecutionStackTest.java: -------------------------------------------------------------------------------- 1 | package parseTree; 2 | 3 | import opcodes.arithmeticOpcodes.binaryArithmeticOpcodes.AddOpcode; 4 | import opcodes.stackOpcodes.DupOpcode; 5 | import opcodes.stackOpcodes.PopOpcode; 6 | import opcodes.stackOpcodes.PushOpcode; 7 | import opcodes.stackOpcodes.SwapOpcode; 8 | import org.junit.jupiter.api.Test; 9 | import parseTree.SymbolicExecution.StackExceededException; 10 | import parseTree.SymbolicExecution.SymbolicExecutionStack; 11 | import parseTree.SymbolicExecution.UnknownStackElementException; 12 | 13 | import java.math.BigInteger; 14 | 15 | import static org.junit.jupiter.api.Assertions.assertEquals; 16 | import static org.junit.jupiter.api.Assertions.assertThrows; 17 | 18 | class SymbolicExecutionStackTest { 19 | 20 | @Test 21 | void executeOpcodeAdd() throws StackExceededException { 22 | SymbolicExecutionStack stack = new SymbolicExecutionStack(); 23 | stack.executeOpcode(new PushOpcode(0, 4, new BigInteger("8"))); 24 | stack.executeOpcode(new PushOpcode(0, 4, new BigInteger("2"))); 25 | stack.executeOpcode(new AddOpcode(0)); 26 | assertThrows(UnknownStackElementException.class, stack::peek); 27 | } 28 | 29 | @Test 30 | void executeOpcodePush() throws StackExceededException { 31 | SymbolicExecutionStack stack = new SymbolicExecutionStack(); 32 | stack.executeOpcode(new PushOpcode(0, 4, new BigInteger("8"))); 33 | try { 34 | assertEquals(8, stack.peek().longValue()); 35 | } catch (UnknownStackElementException e) { 36 | e.printStackTrace(); 37 | } 38 | } 39 | 40 | @Test 41 | void executeOpcodeDup() throws StackExceededException { 42 | SymbolicExecutionStack stack = new SymbolicExecutionStack(); 43 | stack.executeOpcode(new PushOpcode(0, 4, new BigInteger("8"))); 44 | stack.executeOpcode(new PushOpcode(0, 4, new BigInteger("7"))); 45 | stack.executeOpcode(new PushOpcode(0, 4, new BigInteger("4"))); 46 | stack.executeOpcode(new DupOpcode(0, 2)); 47 | try { 48 | assertEquals(7, stack.peek().longValue()); 49 | } catch (UnknownStackElementException e) { 50 | e.printStackTrace(); 51 | } 52 | } 53 | 54 | @Test 55 | void executeOpcodeSwap() throws StackExceededException { 56 | SymbolicExecutionStack stack = new SymbolicExecutionStack(); 57 | stack.executeOpcode(new PushOpcode(0, 4, new BigInteger("8"))); 58 | stack.executeOpcode(new PushOpcode(0, 4, new BigInteger("7"))); 59 | stack.executeOpcode(new PushOpcode(0, 4, new BigInteger("4"))); 60 | stack.executeOpcode(new PushOpcode(0, 4, new BigInteger("3"))); 61 | stack.executeOpcode(new SwapOpcode(0, 3)); 62 | stack.executeOpcode(new PopOpcode(0)); 63 | stack.executeOpcode(new PopOpcode(0)); 64 | stack.executeOpcode(new PopOpcode(0)); 65 | try { 66 | assertEquals(3, stack.peek().longValue()); 67 | } catch (UnknownStackElementException e) { 68 | e.printStackTrace(); 69 | } 70 | } 71 | } -------------------------------------------------------------------------------- /Core/src/main/java/opcodes/Opcode.java: -------------------------------------------------------------------------------- 1 | package opcodes; 2 | 3 | public abstract class Opcode { 4 | protected final OpcodeID opcodeID; 5 | protected long offset; 6 | 7 | protected Opcode(OpcodeID opcodeID) { 8 | this.opcodeID = opcodeID; 9 | } 10 | 11 | /** 12 | * Get the bytecode length of the opcode. 13 | * 14 | * Default value is 1, but the PUSH statement overrides this method. 15 | * @return length in byte of the opcode. 16 | */ 17 | public int getLength(){ 18 | return 1; 19 | } 20 | 21 | 22 | /** 23 | * Get the number of elements that the opcode consumes. They have to be already in the stack. 24 | * @return consumed stack elements. 25 | */ 26 | public abstract int getStackConsumed(); 27 | 28 | /** 29 | * Get the number of elements that the opcode generates on the stack. 30 | * 31 | * Default value is 1, but some opcodes override this method 32 | * @return generated stack elements. 33 | */ 34 | public int getStackGenerated(){ 35 | return 1; 36 | } 37 | 38 | /** 39 | * Default getter for opcodeID 40 | * @return opcodeID 41 | */ 42 | public OpcodeID getOpcodeID() { 43 | return opcodeID; 44 | } 45 | 46 | /** 47 | * Default getter for Name 48 | * @return name of the opcode 49 | */ 50 | public String getName() { 51 | return opcodeID.getName(); 52 | } 53 | 54 | /** 55 | * Assembles the opcode giving the bytes representation 56 | * @return bytes representation 57 | */ 58 | public String getBytes() { 59 | return String.format("%02x", opcodeID.getOpcode()); 60 | } 61 | 62 | /** 63 | * Default getter for the offset, the position in the code 64 | * @return offset of the opcode 65 | */ 66 | public long getOffset() { 67 | return offset; 68 | } 69 | 70 | /** 71 | * String representation of the opcode, with offset and name 72 | * 73 | * e.g. "0: PUSH1 60" 74 | * @return "offset: opcode" 75 | */ 76 | @Override 77 | public String toString() { 78 | return offset + ": " + opcodeID.getName(); 79 | } 80 | 81 | /** 82 | * Checks whether the other opcode represents the same one, even if with a different offset 83 | * @param other opcode to test 84 | * @return if they represents the same opcode 85 | */ 86 | public boolean isSameOpcode(Opcode other){ 87 | return this.opcodeID == other.opcodeID; 88 | } 89 | 90 | /** 91 | * Two opcodes are equals iff they have the same opcodeID and offset 92 | * @param o other object to test 93 | * @return if they are equals 94 | */ 95 | @Override 96 | public boolean equals(Object o) { 97 | if (this == o) return true; 98 | if (o == null || getClass() != o.getClass()) return false; 99 | Opcode opcode = (Opcode) o; 100 | return offset == opcode.offset && opcodeID == opcode.opcodeID; 101 | } 102 | 103 | /** 104 | * Default hashcode. It's calculated as a xor between opcodeID hashcode and the offset 105 | * @return hashcode 106 | */ 107 | @Override 108 | public int hashCode() { 109 | return (int) (opcodeID.hashCode() ^ offset); 110 | } 111 | } 112 | -------------------------------------------------------------------------------- /doc/jquery/jquery-ui.structure.css: -------------------------------------------------------------------------------- 1 | /*! 2 | * jQuery UI CSS Framework 1.12.1 3 | * http://jqueryui.com 4 | * 5 | * Copyright jQuery Foundation and other contributors 6 | * Released under the MIT license. 7 | * http://jquery.org/license 8 | * 9 | * http://api.jqueryui.com/category/theming/ 10 | */ 11 | /* Layout helpers 12 | ----------------------------------*/ 13 | .ui-helper-hidden { 14 | display: none; 15 | } 16 | .ui-helper-hidden-accessible { 17 | border: 0; 18 | clip: rect(0 0 0 0); 19 | height: 1px; 20 | margin: -1px; 21 | overflow: hidden; 22 | padding: 0; 23 | position: absolute; 24 | width: 1px; 25 | } 26 | .ui-helper-reset { 27 | margin: 0; 28 | padding: 0; 29 | border: 0; 30 | outline: 0; 31 | line-height: 1.3; 32 | text-decoration: none; 33 | font-size: 100%; 34 | list-style: none; 35 | } 36 | .ui-helper-clearfix:before, 37 | .ui-helper-clearfix:after { 38 | content: ""; 39 | display: table; 40 | border-collapse: collapse; 41 | } 42 | .ui-helper-clearfix:after { 43 | clear: both; 44 | } 45 | .ui-helper-zfix { 46 | width: 100%; 47 | height: 100%; 48 | top: 0; 49 | left: 0; 50 | position: absolute; 51 | opacity: 0; 52 | filter:Alpha(Opacity=0); /* support: IE8 */ 53 | } 54 | 55 | .ui-front { 56 | z-index: 100; 57 | } 58 | 59 | 60 | /* Interaction Cues 61 | ----------------------------------*/ 62 | .ui-state-disabled { 63 | cursor: default !important; 64 | pointer-events: none; 65 | } 66 | 67 | 68 | /* Icons 69 | ----------------------------------*/ 70 | .ui-icon { 71 | display: inline-block; 72 | vertical-align: middle; 73 | margin-top: -.25em; 74 | position: relative; 75 | text-indent: -99999px; 76 | overflow: hidden; 77 | background-repeat: no-repeat; 78 | } 79 | 80 | .ui-widget-icon-block { 81 | left: 50%; 82 | margin-left: -8px; 83 | display: block; 84 | } 85 | 86 | /* Misc visuals 87 | ----------------------------------*/ 88 | 89 | /* Overlays */ 90 | .ui-widget-overlay { 91 | position: fixed; 92 | top: 0; 93 | left: 0; 94 | width: 100%; 95 | height: 100%; 96 | } 97 | .ui-autocomplete { 98 | position: absolute; 99 | top: 0; 100 | left: 0; 101 | cursor: default; 102 | } 103 | .ui-menu { 104 | list-style: none; 105 | padding: 0; 106 | margin: 0; 107 | display: block; 108 | outline: 0; 109 | } 110 | .ui-menu .ui-menu { 111 | position: absolute; 112 | } 113 | .ui-menu .ui-menu-item { 114 | margin: 0; 115 | cursor: pointer; 116 | /* support: IE10, see #8844 */ 117 | list-style-image: url("data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7"); 118 | } 119 | .ui-menu .ui-menu-item-wrapper { 120 | position: relative; 121 | padding: 3px 1em 3px .4em; 122 | } 123 | .ui-menu .ui-menu-divider { 124 | margin: 5px 0; 125 | height: 0; 126 | font-size: 0; 127 | line-height: 0; 128 | border-width: 1px 0 0 0; 129 | } 130 | .ui-menu .ui-state-focus, 131 | .ui-menu .ui-state-active { 132 | margin: -1px; 133 | } 134 | 135 | /* icon support */ 136 | .ui-menu-icons { 137 | position: relative; 138 | } 139 | .ui-menu-icons .ui-menu-item-wrapper { 140 | padding-left: 2em; 141 | } 142 | 143 | /* left-aligned */ 144 | .ui-menu .ui-icon { 145 | position: absolute; 146 | top: 0; 147 | bottom: 0; 148 | left: .2em; 149 | margin: auto 0; 150 | } 151 | 152 | /* right-aligned */ 153 | .ui-menu .ui-menu-icon { 154 | left: auto; 155 | right: 0; 156 | } 157 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | 2 | # Created by https://www.gitignore.io/api/java,gradle,intellij 3 | # Edit at https://www.gitignore.io/?templates=java,gradle,intellij 4 | 5 | ### Intellij ### 6 | # Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio and WebStorm 7 | # Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839 8 | 9 | # User-specific stuff 10 | .idea/**/workspace.xml 11 | .idea/**/tasks.xml 12 | .idea/**/usage.statistics.xml 13 | .idea/**/dictionaries 14 | .idea/**/shelf 15 | 16 | # Generated files 17 | .idea/**/contentModel.xml 18 | 19 | # Sensitive or high-churn files 20 | .idea/**/dataSources/ 21 | .idea/**/dataSources.ids 22 | .idea/**/dataSources.local.xml 23 | .idea/**/sqlDataSources.xml 24 | .idea/**/dynamic.xml 25 | .idea/**/uiDesigner.xml 26 | .idea/**/dbnavigator.xml 27 | 28 | # Gradle 29 | .idea/**/gradle.xml 30 | .idea/**/libraries 31 | 32 | # Gradle and Maven with auto-import 33 | # When using Gradle or Maven with auto-import, you should exclude module files, 34 | # since they will be recreated, and may cause churn. Uncomment if using 35 | # auto-import. 36 | # .idea/modules.xml 37 | # .idea/*.iml 38 | # .idea/modules 39 | # *.iml 40 | # *.ipr 41 | 42 | # CMake 43 | cmake-build-*/ 44 | 45 | # Mongo Explorer plugin 46 | .idea/**/mongoSettings.xml 47 | 48 | # File-based project format 49 | *.iws 50 | 51 | # IntelliJ 52 | out/ 53 | 54 | # mpeltonen/sbt-idea plugin 55 | .idea_modules/ 56 | 57 | # JIRA plugin 58 | atlassian-ide-plugin.xml 59 | 60 | # Cursive Clojure plugin 61 | .idea/replstate.xml 62 | 63 | # Crashlytics plugin (for Android Studio and IntelliJ) 64 | com_crashlytics_export_strings.xml 65 | crashlytics.properties 66 | crashlytics-build.properties 67 | fabric.properties 68 | 69 | # Editor-based Rest Client 70 | .idea/httpRequests 71 | 72 | # Android studio 3.1+ serialized cache file 73 | .idea/caches/build_file_checksums.ser 74 | 75 | ### Intellij Patch ### 76 | # Comment Reason: https://github.com/joeblau/gitignore.io/issues/186#issuecomment-215987721 77 | 78 | # *.iml 79 | # modules.xml 80 | # .idea/misc.xml 81 | # *.ipr 82 | 83 | # Sonarlint plugin 84 | .idea/**/sonarlint/ 85 | 86 | # SonarQube Plugin 87 | .idea/**/sonarIssues.xml 88 | 89 | # Markdown Navigator plugin 90 | .idea/**/markdown-navigator.xml 91 | .idea/**/markdown-navigator/ 92 | 93 | ### Java ### 94 | # Compiled class file 95 | *.class 96 | 97 | # Log file 98 | *.log 99 | 100 | # BlueJ files 101 | *.ctxt 102 | 103 | # Mobile Tools for Java (J2ME) 104 | .mtj.tmp/ 105 | 106 | # Package Files # 107 | *.jar 108 | *.war 109 | *.nar 110 | *.ear 111 | *.zip 112 | *.tar.gz 113 | *.rar 114 | 115 | # virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml 116 | hs_err_pid* 117 | 118 | ### Gradle ### 119 | .gradle 120 | build/ 121 | 122 | # Ignore Gradle GUI config 123 | gradle-app.setting 124 | 125 | # Avoid ignoring Gradle wrapper jar file (.jar files are usually ignored) 126 | !gradle-wrapper.jar 127 | 128 | # Avoid ignoring main artifact jar file (.jar files are usually ignored) 129 | !artifact/EtherSolve.jar 130 | 131 | # Cache of project 132 | .gradletasknamecache 133 | 134 | # # Work around https://youtrack.jetbrains.com/issue/IDEA-116898 135 | # gradle/wrapper/gradle-wrapper.properties 136 | 137 | ### Gradle Patch ### 138 | **/build/ 139 | 140 | # End of https://www.gitignore.io/api/java,gradle,intellij 141 | /outputs/ 142 | /inputs/abi/ 143 | 144 | **/.settings/ 145 | **/bin/ 146 | .classpath 147 | .project 148 | .vscode/ -------------------------------------------------------------------------------- /Core/src/main/java/opcodes/OpcodeID.java: -------------------------------------------------------------------------------- 1 | package opcodes; 2 | 3 | public enum OpcodeID { 4 | 5 | STOP ((byte) 0x00,"STOP"), 6 | ADD ((byte) 0x01,"ADD"), 7 | MUL ((byte) 0x02,"MUL"), 8 | SUB ((byte) 0x03,"SUB"), 9 | DIV ((byte) 0x04,"DIV"), 10 | SDIV ((byte) 0x05,"SDIV"), 11 | MOD ((byte) 0x06,"MOD"), 12 | SMOD ((byte) 0x07,"SMOD"), 13 | ADDMOD ((byte) 0x08,"ADDMOD"), 14 | MULMOD ((byte) 0x09,"MULMOD"), 15 | EXP ((byte) 0x0a,"EXP"), 16 | SIGNEXTEND ((byte) 0x0b,"SIGNEXTEND"), 17 | LT ((byte) 0x10,"LT"), 18 | GT ((byte) 0x11,"GT"), 19 | SLT ((byte) 0x12,"SLT"), 20 | SGT ((byte) 0x13,"SGT"), 21 | EQ ((byte) 0x14,"EQ"), 22 | ISZERO ((byte) 0x15,"ISZERO"), 23 | AND ((byte) 0x16,"AND"), 24 | OR ((byte) 0x17,"OR"), 25 | XOR ((byte) 0x18,"XOR"), 26 | NOT ((byte) 0x19,"NOT"), 27 | BYTE ((byte) 0x1a,"BYTE"), 28 | SHL ((byte) 0x1b, "SHL"), 29 | SHR ((byte) 0x1c, "SHR"), 30 | SAR ((byte) 0x1d, "SAR"), 31 | SHA3 ((byte) 0x20,"SHA3"), 32 | ADDRESS ((byte) 0x30,"ADDRESS"), 33 | BALANCE ((byte) 0x31,"BALANCE"), 34 | ORIGIN ((byte) 0x32,"ORIGIN"), 35 | CALLER ((byte) 0x33,"CALLER"), 36 | CALLVALUE ((byte) 0x34,"CALLVALUE"), 37 | CALLDATALOAD ((byte) 0x35,"CALLDATALOAD"), 38 | CALLDATASIZE ((byte) 0x36,"CALLDATASIZE"), 39 | CALLDATACOPY ((byte) 0x37,"CALLDATACOPY"), 40 | CODESIZE ((byte) 0x38,"CODESIZE"), 41 | CODECOPY ((byte) 0x39,"CODECOPY"), 42 | GASPRICE ((byte) 0x3a,"GASPRICE"), 43 | EXTCODESIZE ((byte) 0x3b,"EXTCODESIZE"), 44 | EXTCODECOPY ((byte) 0x3c,"EXTCODECOPY"), 45 | RETURNDATASIZE ((byte) 0x3d,"RETURNDATASIZE"), 46 | RETURNDATACOPY ((byte) 0x3e,"RETURNDATACOPY"), 47 | EXTCODEHASH ((byte) 0x3f, "EXTCODEHASH"), 48 | BLOCKHASH ((byte) 0x40,"BLOCKHASH"), 49 | COINBASE ((byte) 0x41,"COINBASE"), 50 | TIMESTAMP ((byte) 0x42,"TIMESTAMP"), 51 | NUMBER ((byte) 0x43,"NUMBER"), 52 | DIFFICULTY ((byte) 0x44,"DIFFICULTY"), 53 | GASLIMIT ((byte) 0x45,"GASLIMIT"), 54 | CHAINID ((byte) 0x46, "CHAINID"), 55 | SELFBALANCE ((byte) 0x47, "SELFBALANCE"), 56 | POP ((byte) 0x50,"POP"), 57 | MLOAD ((byte) 0x51,"MLOAD"), 58 | MSTORE ((byte) 0x52,"MSTORE"), 59 | MSTORE8 ((byte) 0x53,"MSTORE8"), 60 | SLOAD ((byte) 0x54,"SLOAD"), 61 | SSTORE ((byte) 0x55,"SSTORE"), 62 | JUMP ((byte) 0x56,"JUMP"), 63 | JUMPI ((byte) 0x57,"JUMPI"), 64 | PC ((byte) 0x58,"PC"), 65 | MSIZE ((byte) 0x59,"MSIZE"), 66 | GAS ((byte) 0x5a,"GAS"), 67 | JUMPDEST ((byte) 0x5b,"JUMPDEST"), 68 | PUSH ((byte) 0x60,"PUSH"), 69 | DUP ((byte) 0x80,"DUP"), 70 | SWAP ((byte) 0x90,"SWAP"), 71 | LOG ((byte) 0xa0,"LOG"), 72 | CREATE ((byte) 0xf0,"CREATE"), 73 | CALL ((byte) 0xf1,"CALL"), 74 | CALLCODE ((byte) 0xf2,"CALLCODE"), 75 | RETURN ((byte) 0xf3,"RETURN"), 76 | DELEGATECALL ((byte) 0xf4,"DELEGATECALL"), 77 | STATICCALL ((byte) 0xfa,"STATICCALL"), 78 | REVERT ((byte) 0xfd,"REVERT"), 79 | INVALID ((byte) 0xfe,"INVALID"), 80 | SELFDESTRUCT ((byte) 0xff,"SELFDESTRUCT"); 81 | 82 | private final byte opcode; 83 | private final String name; 84 | 85 | OpcodeID(byte opcode, String name) { 86 | this.opcode = opcode; 87 | this.name = name; 88 | } 89 | 90 | public byte getOpcode() { 91 | return opcode; 92 | } 93 | 94 | public String getName() { 95 | return name; 96 | } 97 | 98 | @Override 99 | public String toString() { 100 | return name; 101 | } 102 | } 103 | -------------------------------------------------------------------------------- /Abi/src/main/java/abi/AbiFunction.java: -------------------------------------------------------------------------------- 1 | package abi; 2 | 3 | import abi.fields.FunctionType; 4 | import abi.fields.IOElement; 5 | 6 | import java.util.ArrayList; 7 | 8 | /** 9 | * Class to represent a function inside an ABI. 10 | * 11 | * It does not store all the information, but only: 12 | *
-
13 | *
- Type 14 | *
- Name 15 | *
- Inputs 16 | *
- Outputs 17 | *
97 |
100 | Deprecated API
98 |Contents
99 |
2 | # EtherSolve 3 | 4 | EtherSolve is a tool for *Control Flow Graph (CFG)* reconstruction and *static analysis* of Solidity smart-contracts from Ethereum bytecode. 5 | 6 | The tool is based on the peer-reviewed pubblication 7 | > Michele Pasqua, Andrea Benini, Filippo Contro, Marco Crosara, Mila Dalla Preda, and Mariano Ceccato. "Enhancing Ethereum smart-contracts static analysis by computing a precise Control-Flow Graph of Ethereum bytecode". In: *Journal of Systems and Software* (pp. 1-18), Elsevier, 2023. DOI: [10.1016/j.jss.2023.111653](https://doi.org/10.1016/j.jss.2023.111653) 8 | 9 | That is a revised and extended version of the peer-reviewed publication 10 | > Filippo Contro, Marco Crosara, Mariano Ceccato, and Mila Dalla Preda. "EtherSolve: Computing an Accurate Control-Flow Graph from Ethereum Bytecode". In: *Proceedings of the 29th IEEE/ACM International Conference on Program Comprehension* (pp. 127-137), IEEE, 2021. DOI: [10.1109/ICPC52881.2021.00021](https://doi.org/10.1109/ICPC52881.2021.00021) 11 | 12 | ### Vulnerability Detection 13 | The tool also provides modules for the detection of Ethereum vulnerabilities. It currently supports *Re-entrancy* and *Tx.origin* vulnerabilities. 14 | 15 | ## Usage 16 | 17 | ### JAR 18 | 19 | The simplest way to try EtherSolve is through the provided `EtherSolve.jar` ([link](artifact/EtherSolve.jar)). 20 | 21 | ```bash 22 | Usage: ethersolve [-hV] [--re-entrancy] [--tx-origin] [-o=
39 | The tool has been tested on Linux x64 with Java 11.0.8. To produce a graphical output (HTML or SVG) [Graphviz](https://graphviz.org/) is required. 40 | 41 | To run the Re-entrancy and the Tx.origin validators add the `--re-entrancy` and the `--tx-origin` options, respectively. The tool will create a CSV file containing the detected vulnerabilities and their location in the code. 42 | 43 | #### Examples 44 | 45 | To analize the bytecode of a smart-contract contained in a given file, you can run following: 46 | 47 | ```bash 48 | # Generate HTML report for creation-code source file 49 | java -jar EtherSolve.jar -c -H path/to/bytecode/file.evm 50 | ``` 51 | 52 | ```bash 53 | # Generate JSON report in 'report.json' for creation-code source file 54 | java -jar EtherSolve.jar -c -j -o report.json path/to/bytecode/file.evm 55 | ``` 56 | 57 | ```bash 58 | # Generate HTML report in 'index.html' for runtime-code source file 59 | java -jar EtherSolve.jar -r -H -o index.html path/to/bytecode/file.evm 60 | ``` 61 | 62 | ```bash 63 | # Generate HTML report in 'index.html' for creation-code source file with Re-entrancy detection analysis 64 | java -jar EtherSolve.jar -c -H -o index.html --re-entrancy path/to/bytecode/file.evm 65 | ``` 66 | 67 | ### Gradle 68 | 69 | To build from source and run the project you should use gradle (minimum Gradle supported version: *5.2.1*). To build from source **Java 8** is required. 70 | 71 | EtherSolve is composed of five modules. 72 | - **Core**: it contains the main procedures to parse the bytecode and build the CFG. 73 | - **Abi**: it contains the validation methods (see the paper) and a prototype for an Abi extraction. 74 | - **UI**: it contains the procedures to graphically represent the CFG using Graphviz and to produce the HTML report. It also contains the command line interface and the main class of the tool. 75 | - **SecurityAnalysis**: it contains the security analyser and the dataset tester used for the comparison with the [SolidiFI](https://arxiv.org/pdf/2005.11613.pdf) survey. 76 | - **WebApp**: it contains a simple SpringBoot server to provide analysis via APIs (unmantained). 77 | 78 | The following Gradle tasks are available. 79 | - `bootRun`: run the project as a Spring Boot application. 80 | - `runCoreMain`: run the main class of the Core module, that analyses a sample bytecode written in the `Main` class, producing a JSON output. 81 | - `runIRExtractor`: run the extractor to get the intermediate representation used for the analysis. 82 | - `runSecurityAnalyser`: run the main class of the Core module, that analyses a sample bytecode. 83 | - `jar`: build a JAR for each module. The only JAR having an entry point is the one of the UI module. The artifact output can be found in the `UI/build/libs` folder. 84 | 85 | For the full list run `gradle tasks`. 86 | 87 | ## Replication Package 88 | 89 | The material to replicate the results presented in the JSS 2023 publication can be found in the [JSS Replication Package](https://zenodo.org/record/7545056). 90 | -------------------------------------------------------------------------------- /doc/gson/package-tree.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 |
104 |
105 |
114 |
115 | Class Hierarchy
106 |-
107 |
- java.lang.Object
108 |
-
109 |
- gson.GsonAbi 110 |
112 |
104 |
105 |
114 |
115 | Class Hierarchy
106 |-
107 |
- java.lang.Object
108 |
-
109 |
- etherscan.EtherScanDownloader 110 |
112 |