Semi-Interactive Assembly Verification in Knuckledragger (www.philipzucker.com)

A new semi-interactive assembly verification tool named Knuckledragger has been announced, further enhancing the interactive proof experience in Python for assembly code. Building on a fully automatic tool previously developed, this semi-interactive mode allows users to debug failing specifications and tackle more complex properties in assembly code verification. Knuckledragger uses the Z3py proof assistant, providing an iterative approach to verification through an interactive Jupyter notebook environment. This setup enhances usability by allowing developers to build and debug specifications step-by-step. The significance of this development lies in its ability to facilitate assembly code verification, an area that often struggles with presenting clear and usable proofs, especially for complex assembly constructs. Knuckledragger incorporates finite trace fragments to construct control flow graphs (CFGs), and it can discover verification conditions that relate preconditions and postconditions effectively. The tool’s reliance on the pypcode package for binary lifting, along with symbolic execution capabilities, positions it as a powerful resource for debugging and verifying assembly code, paving the way for more reliable and secure software. The source code is available for public access, encouraging collaboration and improvement within the AI and ML community.