Cannot see sym variables from angrgdb shell

[sudo45]

Cannot see sym variables from angrgdb shell

[andreafioraldi]

The writeup is mine lol.

Thanks for the issue but this is not the correct way of using get_variables. A variable must be submitted to the tracker before using get:variables, see here.

You can get all variables created with a StateManager (that is only a wrapper) you can use the sm.symbolics dictionary. The key are registers names of addresses, in your case the key is the value of rbx (0x7fffffffda30). The returned value is a tuple (bitvector, size) (yes size is redundant and i don't remember why).

In addition, angrgdb sim $rbx, 15 is not a correct command, use angrgdb sim $rbx 15 instead.

My suggestion is to not use the GDB commands when you want to use the shell, simply type angrdbg shell and add find/avoid addresses and symbolic values directly in python:

key = sm.sim(sm["rbx"], 15) # key is solver.eval(sm["rbx"], cast_to=int)
sm[key] # get the variable in the right way
sm.symbolics[key][0] # dirty way
m.explore(find= 0x800145c, avoid= 0x800145a)
...
sm.to_dbg(m.found[0]) # write results back to gdb

[sudo45]

Thank you, this solved the problem!