草稿1

angr 约束的ast孩子

solver.constraints[0]是angr当前state的第一个约束，是ast形式来展示的，其中，以下接口与约束的孩子有关，即得到约束的叶子或者子树

以下返回结果大部分只有BVV和BVS类型，不包含int类型（如扩展位数操作的32和8），args会返回int类型的数

#	Description	Method
返回两个子树	此ast节点的孩子子树	state.solver.constraints[0].args
返回所有子树	此ast节点的所有孩子子树，对于位数扩展操作，仅有被扩展的ast，没有扩展的位数作为子树，我认为可能是仅仅记录BVV和BVS，不记录int	list(state.solver.constraints[0].children_asts())
		list(state.solver.constraints[0].recursive_children_asts)
返回所有叶子	其BVV和BVS的叶子节点	list(state.solver.constraints[0].leaf_asts())
		list(state.solver.constraints[0].recursive_leaf_asts)

这是以下运行结果和相应代码

state.solver.constraints[0]:
<Bool SignExt(24, __wql_func_arg_3___42_64[7:0]) - 0x25 > 0xa>
-----------------------------------------------
state.solver.constraints[0].args:
(<BV32 SignExt(24, __wql_func_arg_3___42_64[7:0]) - 0x25>, <BV32 0xa>)
-----------------------------------------------
list(state.solver.constraints[0].children_asts()):
[<BV32 SignExt(24, __wql_func_arg_3___42_64[7:0]) - 0x25>, <BV32 SignExt(24, __wql_func_arg_3___42_64[7:0])>, <BV8 __wql_func_arg_3___42_64[7:0]>, <BV64 __wql_func_arg_3___42_64>, <BV32 0x25>, <BV32 0xa>]
-----------------------------------------------
list(state.solver.constraints[0].leaf_asts()):
[<BV32 0xa>, <BV32 0x25>, <BV64 __wql_func_arg_3___42_64>]
-----------------------------------------------
list(state.solver.constraints[0].recursive_children_asts):
[<BV32 SignExt(24, __wql_func_arg_3___42_64[7:0]) - 0x25>, <BV32 SignExt(24, __wql_func_arg_3___42_64[7:0])>, <BV8 __wql_func_arg_3___42_64[7:0]>, <BV64 __wql_func_arg_3___42_64>, <BV32 0x25>, <BV32 0xa>]
-----------------------------------------------
list(state.solver.constraints[0].recursive_leaf_asts):
[<BV32 0xa>, <BV32 0x25>, <BV64 __wql_func_arg_3___42_64>]

        print(state.solver.constraints[0])
        print("-----------------------------------------------")
        print("state.solver.constraints[0].args:")
        print(state.solver.constraints[0].args)
        print("-----------------------------------------------")
        print("list(state.solver.constraints[0].children_asts()):")
        print(list(state.solver.constraints[0].children_asts()))
        print("-----------------------------------------------")
        print("list(state.solver.constraints[0].leaf_asts()):")
        print(list(state.solver.constraints[0].leaf_asts()))
        print("-----------------------------------------------")
        print("list(state.solver.constraints[0].recursive_children_asts):")
        print(list(state.solver.constraints[0].recursive_children_asts))
        print("-----------------------------------------------")
        print("list(state.solver.constraints[0].recursive_leaf_asts):")
        print(list(state.solver.constraints[0].recursive_leaf_asts))

_arg_registers, Value: {32, 64, 96, 72, 80, 24, 88}
_function_map, Value: FunctionDict({4210688: <Function _init (0x404000)>, 4210720: <Function sub_404020 (0x404020)>,