Hemostat
Repair a binary you have no source for — offline — and prove the repair
The Sanjeevani pipeline takes a stripped ELF binary and nothing else: fuzz it to a crash, lift the faulting function back to C, write a fix, splice it into the binary, and prove the bug is gone while behaviour elsewhere is unchanged.
$ ./demo.sh stack_overflow unbounded strcpy (CWE-121) PROVEN 0x401190 off_by_one i <= n loop bound (CWE-193) PROVEN 0x401228 format_string printf(user_input)(CWE-134) BOUNDED — FIND+READ 13.9s WRITE 0.1s SPLICE 3.2s PROVE 2.9s TOTAL 20.2s remote connections: 0 (strace-verified) disk: 8.6 GB





