From 49e043857865be7af99ac627ea63d20dade10ad6 Mon Sep 17 00:00:00 2001 From: Alexandre ZANNI <16578570+noraj@users.noreply.github.com> Date: Fri, 13 Jan 2023 20:56:53 +0100 Subject: [PATCH 1/7] [chore] fix build badges (#2614) --- README.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index ee896432b..518079eac 100644 --- a/README.md +++ b/README.md @@ -5,14 +5,16 @@
-[![Build Status](https://img.shields.io/github/workflow/status/trailofbits/manticore/CI/master)](https://github.com/trailofbits/manticore/actions?query=workflow%3ACI) +[![Build Status](https://img.shields.io/github/actions/workflow/status/trailofbits/manticore/ci.yml?branch=master)](https://github.com/trailofbits/manticore/actions?query=workflow%3ACI) [![Coverage Status](https://coveralls.io/repos/github/trailofbits/manticore/badge.svg)](https://coveralls.io/github/trailofbits/manticore) [![PyPI Version](https://badge.fury.io/py/manticore.svg)](https://badge.fury.io/py/manticore) [![Slack Status](https://empireslacking.herokuapp.com/badge.svg)](https://empireslacking.herokuapp.com) [![Documentation Status](https://readthedocs.org/projects/manticore/badge/?version=latest)](http://manticore.readthedocs.io/en/latest/?badge=latest) -[![Example Status](https://img.shields.io/github/workflow/status/trailofbits/manticore-examples/CI/master)](https://github.com/trailofbits/manticore-examples/actions?query=workflow%3ACI) +[![Example Status](https://img.shields.io/github/actions/workflow/status/trailofbits/manticore-examples/ci.yml?branch=master)](https://github.com/trailofbits/manticore-examples/actions?query=workflow%3ACI) [![LGTM Total Alerts](https://img.shields.io/lgtm/alerts/g/trailofbits/manticore.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/trailofbits/manticore/alerts/) + + Manticore is a symbolic execution tool for the analysis of smart contracts and binaries. ## Features From dc8c3c822bbd50adabe50cafef38457505c0bc7b Mon Sep 17 00:00:00 2001 From: omahs <73983677+omahs@users.noreply.github.com> Date: Fri, 13 Jan 2023 22:10:05 +0100 Subject: [PATCH 2/7] Fix: typos (#2615) --- README.md | 2 +- docs/verifier.rst | 14 +++++++------- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/README.md b/README.md index 518079eac..dbff9d108 100644 --- a/README.md +++ b/README.md @@ -104,7 +104,7 @@ $ manticore examples/evm/umd_example.sol ##### Manticore-verifier -An alternative CLI tool is provided that simplifys contract testing and +An alternative CLI tool is provided that simplifies contract testing and allows writing properties methods in the same high-level language the contract uses. Checkout manticore-verifier [documentation](http://manticore.readthedocs.io/en/latest/verifier.html). See a [demo](https://asciinema.org/a/xd0XYe6EqHCibae0RP6c7sJVE) diff --git a/docs/verifier.rst b/docs/verifier.rst index fac9cd7cf..568c18d3b 100644 --- a/docs/verifier.rst +++ b/docs/verifier.rst @@ -6,7 +6,7 @@ Manticore installs a separated CLI tool to do property based symbolic execution **manticore-verifier** initializes an emulated blockchain environment with a configurable set of accounts and then sends various symbolic transactions to the target contract containing property methods. -If a way to break a property is found the full transaction trace to reproduce the behaivor is provided. +If a way to break a property is found the full transaction trace to reproduce the behavior is provided. A configurable stopping condition bounds the exploration, properties not failing are considered to pass. @@ -48,8 +48,8 @@ Reverting property are any property method that contains "revert". For example: Selecting a target contract =========================== -**manticore-verifier** needs to be pointed to a the target contract containing any number of property methods. -The target contract is the entry point of the exploration. It needs to initilize any internal structure or external contracts to a correct initial state. All methods of this contract matching the property name criteria will be tested. :: +**manticore-verifier** needs to be pointed to the target contract containing any number of property methods. +The target contract is the entry point of the exploration. It needs to initialize any internal structure or external contracts to a correct initial state. All methods of this contract matching the property name criteria will be tested. :: --contract_name CONTRACT_NAME The target contract name defined in the source code @@ -57,7 +57,7 @@ The target contract is the entry point of the exploration. It needs to initilize User accounts ============= You can specify what are the accounts used in the exploration. -Normaly you do not want the owner or deployer of the contract to send the symbolic transaction and to use a separate unused account to actually check the property methods. +Normally you do not want the owner or deployer of the contract to send the symbolic transaction and to use a separate unused account to actually check the property methods. There are 3 types of user accounts: - deployer: The account used to create the target contract @@ -90,12 +90,12 @@ The exploration will continue to send symbolic transactions until one of the sto Maximum number of transactions ----------------------------- -You can be interested only in what could happen under a number of transactions. After a maximun number of transactions is reached the explorations ends. Properties that had not be found to be breakable are considered a pass. +You can be interested only in what could happen under a number of transactions. After a maximum number of transactions is reached the explorations ends. Properties that had not been found to be breakable are considered a pass. You can modify the max number of transactions to test vis a command line argument, otherwise it will stop at 3 transactions. :: --maxt MAXT Max transaction count to explore -Maximun coverage % attained +Maximum coverage % attained --------------------------- By default, if a transaction does not produce new coverage, the exploration is stopped. But you can add a further constraint so that if the provided coverage percentage is obtained, stop. Note that this is the total % of runtime bytecode covered. By default, compilers add dead code, and also in this case the runtime contains the code of the properties methods. So use with care. :: @@ -105,7 +105,7 @@ By default, if a transaction does not produce new coverage, the exploration is s Timeout ------- -Exploration will stop after the timeout seconds have pass. :: +Exploration will stop after the timeout seconds have passed. :: --timeout TIMEOUT Exploration timeout in seconds From 2425d3114ebebfdbf88bd736e8d6037353a367b8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 17 Feb 2023 10:12:28 -0500 Subject: [PATCH 3/7] Bump pypa/gh-action-pip-audit from 1.0.4 to 1.0.6 (#2618) Bumps [pypa/gh-action-pip-audit](https://github.com/pypa/gh-action-pip-audit) from 1.0.4 to 1.0.6. - [Release notes](https://github.com/pypa/gh-action-pip-audit/releases) - [Commits](https://github.com/pypa/gh-action-pip-audit/compare/v1.0.4...v1.0.6) --- updated-dependencies: - dependency-name: pypa/gh-action-pip-audit dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/pip-audit.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pip-audit.yml b/.github/workflows/pip-audit.yml index 27011c279..72d3a0382 100644 --- a/.github/workflows/pip-audit.yml +++ b/.github/workflows/pip-audit.yml @@ -22,4 +22,4 @@ jobs: python -m pip install --upgrade pip setuptools python -m pip install . - name: Run pip-audit - uses: pypa/gh-action-pip-audit@v1.0.4 + uses: pypa/gh-action-pip-audit@v1.0.6 From c6b71fcbed0798a5e3998b66306881c1902b44f6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 11 Apr 2023 09:17:26 -0400 Subject: [PATCH 4/7] Bump coverallsapp/github-action from 1.1.3 to 2.1.0 (#2632) Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action) from 1.1.3 to 2.1.0. - [Release notes](https://github.com/coverallsapp/github-action/releases) - [Commits](https://github.com/coverallsapp/github-action/compare/1.1.3...v2.1.0) --- updated-dependencies: - dependency-name: coverallsapp/github-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 46aee73f1..86b20aedc 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -151,7 +151,7 @@ jobs: runs-on: ubuntu-20.04 steps: - name: Coveralls Finished - uses: coverallsapp/github-action@1.1.3 + uses: coverallsapp/github-action@v2.1.0 with: github-token: ${{ secrets.GITHUB_TOKEN }} parallel-finished: true From 7f629c942449d501836d3b321baf3aba2cc1abdd Mon Sep 17 00:00:00 2001 From: Artem Dinaburg Date: Tue, 11 Apr 2023 14:59:48 -0400 Subject: [PATCH 5/7] Add CODEOWNERS file (#2633) --- CODEOWNERS | 1 + 1 file changed, 1 insertion(+) create mode 100644 CODEOWNERS diff --git a/CODEOWNERS b/CODEOWNERS new file mode 100644 index 000000000..836841e5c --- /dev/null +++ b/CODEOWNERS @@ -0,0 +1 @@ +* @ekilmer From 7545c6b21f460ada2a2791b9a878cf31b42cf54b Mon Sep 17 00:00:00 2001 From: James Olds Date: Thu, 29 Jun 2023 14:15:55 -0400 Subject: [PATCH 6/7] update link to empirehacking slack (#2644) --- CONTRIBUTING.md | 2 +- README.md | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index b7ec75670..79432c7ea 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -19,7 +19,7 @@ instead. ## Questions Questions can be submitted to the [discussion page](https://github.com/trailofbits/manticore/discussions), but you may get a faster -response if you ask in our [chat room](https://empireslacking.herokuapp.com/) +response if you ask in our [chat room](https://slack.empirehacking.nyc/) (in the #manticore channel). ## Legal diff --git a/README.md b/README.md index dbff9d108..214318cdc 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ [![Build Status](https://img.shields.io/github/actions/workflow/status/trailofbits/manticore/ci.yml?branch=master)](https://github.com/trailofbits/manticore/actions?query=workflow%3ACI) [![Coverage Status](https://coveralls.io/repos/github/trailofbits/manticore/badge.svg)](https://coveralls.io/github/trailofbits/manticore) [![PyPI Version](https://badge.fury.io/py/manticore.svg)](https://badge.fury.io/py/manticore) -[![Slack Status](https://empireslacking.herokuapp.com/badge.svg)](https://empireslacking.herokuapp.com) +[![Slack Status](https://slack.empirehacking.nyc/badge.svg)](https://slack.empirehacking.nyc) [![Documentation Status](https://readthedocs.org/projects/manticore/badge/?version=latest)](http://manticore.readthedocs.io/en/latest/?badge=latest) [![Example Status](https://img.shields.io/github/actions/workflow/status/trailofbits/manticore-examples/ci.yml?branch=master)](https://github.com/trailofbits/manticore-examples/actions?query=workflow%3ACI) [![LGTM Total Alerts](https://img.shields.io/lgtm/alerts/g/trailofbits/manticore.svg?logo=lgtm&logoWidth=18)](https://lgtm.com/projects/g/trailofbits/manticore/alerts/) @@ -250,7 +250,7 @@ Yices is incredibly fast. More details here https://yices.csl.sri.com/ ## Getting Help -Feel free to stop by our #manticore slack channel in [Empire Hacking](https://empireslacking.herokuapp.com/) for help using or extending Manticore. +Feel free to stop by our #manticore slack channel in [Empire Hacking](https://slack.empirehacking.nyc/) for help using or extending Manticore. Documentation is available in several places: From 8861005396ed3e25ecef9cd229e5319ae2fe2612 Mon Sep 17 00:00:00 2001 From: Eric Kilmer Date: Tue, 11 Jul 2023 11:14:19 -0400 Subject: [PATCH 7/7] Project is in Maintenance Mode (#2645) --- README.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/README.md b/README.md index 214318cdc..51a0d71ab 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,9 @@ +# :warning: Project is in Maintenance Mode :warning: + +This project is no longer internally developed and maintained. However, we are happy to review and accept small, well-written pull requests by the community. We will only consider bug fixes and minor enhancements. + +Any new or currently open issues and discussions shall be answered and supported by the community. + # Manticore