Bug in bitwise_or_simplifier?

Hello,

I am encountering a crash in angr. The exact scenario is difficult to reproduce, but I think the following information might be sufficient.

Here is a backtrace of the Claripy exception:

(Pdb) traceback.print_exc()
Traceback (most recent call last):
  File "/usr/local/lib/python3.7/site-packages/angr/engines/vex/claripy/irop.py", line 375, in calculate
    return self.extend_size(self._calculate(args))
  File "/usr/local/lib/python3.7/site-packages/angr/engines/vex/claripy/irop.py", line 437, in _op_mapped
    return getattr(claripy.ast.BV, o)(*sized_args)
  File "/usr/local/lib/python3.7/site-packages/claripy/operations.py", line 53, in _op
    simp = _handle_annotations(simplifications.simpleton.simplify(name, fixed_args), args)
  File "/usr/local/lib/python3.7/site-packages/claripy/simplifications.py", line 42, in simplify
    return self._simplifiers[op](*args)
  File "/usr/local/lib/python3.7/site-packages/claripy/simplifications.py", line 604, in bitwise_or_simplifier
    elif (a == b).is_true():
  File "/usr/local/lib/python3.7/site-packages/claripy/operations.py", line 53, in _op
    simp = _handle_annotations(simplifications.simpleton.simplify(name, fixed_args), args)
  File "/usr/local/lib/python3.7/site-packages/claripy/simplifications.py", line 42, in simplify
    return self._simplifiers[op](*args)
  File "/usr/local/lib/python3.7/site-packages/claripy/simplifications.py", line 227, in eq_simplifier
    simp = SimplificationManager.zeroext_extract_comparing_against_constant_simplifier(operator.__eq__, a, b)
  File "/usr/local/lib/python3.7/site-packages/claripy/simplifications.py", line 950, in zeroext_extract_comparing_against_constant_simplifier
    return op(ast.all_operations.ZeroExt(to_extend, a_inner_expr), b)
  File "/usr/local/lib/python3.7/site-packages/claripy/operations.py", line 53, in _op
    simp = _handle_annotations(simplifications.simpleton.simplify(name, fixed_args), args)
  File "/usr/local/lib/python3.7/site-packages/claripy/simplifications.py", line 42, in simplify
    return self._simplifiers[op](*args)
  File "/usr/local/lib/python3.7/site-packages/claripy/simplifications.py", line 232, in eq_simplifier
    simp = SimplificationManager.zeroext_comparing_against_simplifier(operator.__eq__, a, b)
  File "/usr/local/lib/python3.7/site-packages/claripy/simplifications.py", line 968, in zeroext_comparing_against_simplifier
    b_highbits = b[b.size() - 1 : b.size() - a_zeroext_bits]
  File "/usr/local/lib/python3.7/site-packages/claripy/ast/bv.py", line 72, in __getitem__
    return Extract(left, right, self)
  File "/usr/local/lib/python3.7/site-packages/claripy/operations.py", line 50, in _op
    raise ClaripyOperationError(msg)
claripy.errors.ClaripyOperationError: Extract low must be <= high

And here are the args of the bitwise OR operation:

(Pdb) print(args)
(<BV8 (0 .. mem_c0000000_255_32{UNINITIALIZED}[14:0])[15:8]>, <BV8 128>)

Any help would be appreciated.

[ltfish]

This is probably my code. I’ll take a look after my meetings today.

[ltfish]

You are welcome!