Simple Tracer HOW TO

1. get sources

$ mkdir <work-dir>
$ cd <work-dir>
$ git clone https://github.com/bitdefender/simpletracer.git

2. environment setup

Simpletracer build needs RIVER SDK. Export RIVER_SDK_DIR accordingly.
Simpletracer supports tracing using Z3 engine(4.4.1 32-bit). Build Simpletracer using cmake.

LD_LIBRARY_PATH must allow access to RIVER libraries, Z3 library and native libraries libc.so and libpthread.so.
Create the following symlinks:

RIVER_NATIVE_LIBS=<some path>
LIBC_PATH=$(find /lib -name libc.so.6 -path *i386*)
LIBPTHREAD_PATH=$(find /lib -name libpthread.so.0 -path *i386*)
ln -s -T $LIBC_PATH $RIVER_NATIVE_LIBS/libc.so
ln -s -T $LIBPTHREAD_PATH $RIVER_NATIVE_LIBS/libpthread.so

3. run

$ ./bin/river.tracer --payload <target-library> [--annotated] [--z3] < <input_test_case>

--payload <target-library> specifies the shared object that you want to trace. This must export the payload that is the tested sw entry point.

--annotated adds tainted index data in traces

--z3 specified together with --annotated adds z3 data in traces

<input_test_case> is corpus file that represents a test case.