What do the numbers that appear in the db tables attackpoint and bug in the type column mean? They are defined in two places, lava.py and lava.hxx.
attackpoint types:
FUNCTION_ARG
(an arg to a fn)POINTER_READ
(read via ptr)POINTER_WRITE
(write via ptr)QUERY_POINT
(is this the sentinels ricky puts in after every stmt?)PRINTF_LEAK
(really just a printf)
bug types:
PTR_ADD
(corrupt a pointer at attack point)RET_BUFFER
(stack pivot)REL_WRITE
(This was a is a write-what-where but is now a misnomer for a 3-dua variation on aPTR_ADD
bug)PRINTF_LEAK
(turn printf into a stack / heap leak)