Skip to content

AArch64 - The balancer is messing up an AST #656

Description

@vladimir-aurora

Description

Attached is an ELF file, libllama.so, along with requirements.txt and main.py script.
Once the requirements are installed, the script can be executed like so:
$ python main.py libllama.so

angr-issue.zip

The script creates angr project and does CFGFast analyses, producing the following output:

WARNING  | 2025-10-27 12:06:03,714 | cle.loader     | Symbol imported without a known size; emulation may fail if it is used non-opaqely: _ZNSt5ctypeIcE2idE, _ZNSt5ctypeIwE2idE, _ZSt11__once_call, _ZSt15__once_callable, _ZTIN10__cxxabiv115__forced_unwindE, _ZTINSt13__future_base12_Result_baseE, _ZTINSt6locale5facetE, _ZTINSt6thread6_StateE, _ZTISt11regex_error, _ZTISt12future_error, _ZTISt12out_of_range, _ZTISt12system_error, _ZTISt13runtime_error, _ZTISt16invalid_argument, _ZTISt19__codecvt_utf8_baseIwE, _ZTISt5ctypeIcE, _ZTISt5ctypeIwE, _ZTISt9exception, _ZTVN10__cxxabiv117__class_type_infoE, _ZTVN10__cxxabiv119__pointer_type_infoE, _ZTVN10__cxxabiv120__function_type_infoE, _ZTVN10__cxxabiv120__si_class_type_infoE, _ZTVNSt6thread6_StateE, _ZTVSt11regex_error, _ZTVSt12future_error, _ZTVSt19__codecvt_utf8_baseIwE, __libc_single_threaded, __stack_chk_guard. See https://docs.angr.io/extending-angr/environment#simdata
CRITICAL | 2025-10-27 12:06:44,265 | claripy.backends.backend_vsa.balancer | ERROR: the balancer is messing up an AST. This must be looked into. Please submit the binary and script to the angr project, if possible. Outer op is __eq__ and inner op is __sub__.
CRITICAL | 2025-10-27 12:06:44,269 | claripy.backends.backend_vsa.balancer | ERROR: the balancer is messing up an AST. This must be looked into. Please submit the binary and script to the angr project, if possible. Outer op is __ne__ and inner op is __sub__.
CRITICAL | 2025-10-27 12:06:44,303 | claripy.backends.backend_vsa.balancer | ERROR: the balancer is messing up an AST. This must be looked into. Please submit the binary and script to the angr project, if possible. Outer op is __eq__ and inner op is __sub__.
CRITICAL | 2025-10-27 12:06:44,306 | claripy.backends.backend_vsa.balancer | ERROR: the balancer is messing up an AST. This must be looked into. Please submit the binary and script to the angr project, if possible. Outer op is __ne__ and inner op is __sub__.
CRITICAL | 2025-10-27 12:06:44,455 | claripy.backends.backend_vsa.balancer | ERROR: the balancer is messing up an AST. This must be looked into. Please submit the binary and script to the angr project, if possible. Outer op is __eq__ and inner op is __sub__.
CRITICAL | 2025-10-27 12:06:44,460 | claripy.backends.backend_vsa.balancer | ERROR: the balancer is messing up an AST. This must be looked into. Please submit the binary and script to the angr project, if possible. Outer op is __ne__ and inner op is __sub__.
CRITICAL | 2025-10-27 12:06:44,496 | claripy.backends.backend_vsa.balancer | ERROR: the balancer is messing up an AST. This must be looked into. Please submit the binary and script to the angr project, if possible. Outer op is __eq__ and inner op is __sub__.
CRITICAL | 2025-10-27 12:06:44,500 | claripy.backends.backend_vsa.balancer | ERROR: the balancer is messing up an AST. This must be looked into. Please submit the binary and script to the angr project, if possible. Outer op is __ne__ and inner op is __sub__.
functions: 41370

Steps to reproduce the bug

  • extract the archive
  • install the requirements from requirements.txt
  • python main.py libllama.so

Environment

angr environment report
=============================
Date: 2025-10-27 13:12:02.291903
Running in virtual environment at /home/vladimir/Playground/angr-issue/venv
Platform: linux-x86_64
Python version: 3.12.3 (main, Aug 14 2025, 17:47:21) [GCC 13.3.0]
######## angr #########
Python found it in /home/vladimir/Playground/angr-issue/venv/lib/python3.12/site-packages/angr/__init__.py
Pip version 9.2.181
Couldn't find git info
######## archinfo #########
Python found it in /home/vladimir/Playground/angr-issue/venv/lib/python3.12/site-packages/archinfo/__init__.py
Pip version 9.2.181
Couldn't find git info
######## claripy #########
Python found it in /home/vladimir/Playground/angr-issue/venv/lib/python3.12/site-packages/claripy/__init__.py
Pip version 9.2.181
Couldn't find git info
######## cle #########
Python found it in /home/vladimir/Playground/angr-issue/venv/lib/python3.12/site-packages/cle/__init__.py
Pip version 9.2.181
Couldn't find git info
######## pypcode #########
Python found it in /home/vladimir/Playground/angr-issue/venv/lib/python3.12/site-packages/pypcode/__init__.py
Pip version 3.3.3
Couldn't find git info
######## pyvex #########
Python found it in /home/vladimir/Playground/angr-issue/venv/lib/python3.12/site-packages/pyvex/__init__.py
Pip version 9.2.181
Couldn't find git info
######## unicorn #########
An error occurred importing unicorn: 'NoneType' object has no attribute 'origin'
Python found it in /home/vladimir/Playground/angr-issue/venv/lib/python3.12/site-packages/pyvex/__init__.py
Pip version not found!
Couldn't find git info
######## z3 #########
Python found it in /home/vladimir/Playground/angr-issue/venv/lib/python3.12/site-packages/z3/__init__.py
Pip version 4.13.0.0
Couldn't find git info
######### Native Module Info ##########
angr: <CDLL '/home/vladimir/Playground/angr-issue/venv/lib/python3.12/site-packages/angr/unicornlib.so', handle 37b27530 at 0x704ac537b110>
pyvex: <cffi.api._make_ffi_library.<locals>.FFILibrary object at 0x704ac7e026c0>
unicorn: NOT FOUND
z3: <CDLL '/home/vladimir/Playground/angr-issue/venv/lib/python3.12/site-packages/z3/lib/libz3.so', handle 371cc570 at 0x704ac9e6c710>

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions