May 19, 2026

Goals

  • Find out more exploitable regions inside the libtriton.so library.

What I worked on

  • Created framework called chitragupt for figuring out the location of the matcherTable which is used to convert LLVM IR to ptx
  • The framework also has provision to integrate targets other than NVPTX like AMDGPU etc.

Key Insights

  • In triton each version is bound to a specific commit hash in the LLVM project and this commit hash is stored in the cmake/llvm-hash.txt file in the triton library.
  • The exact commit hash can also be found out using libtriton.so with the command strings libtriton.so | grep -E "LLVM.*git|clang.*git|llvmorg"

Questions / Confusions

  • I still need to how predicate in ptx can be manipulated to skip instructions.

Ideas / Hypotheses

  • I can generalize the attack surface of LLVM to different targets like AMDGPU, RISC-V etc.

Papers / Resources

  • None

Next Steps

  • Create an end-to-end automated framework for finding out the exploitable flips.

Introspection

  • Today was a normal day nothing eventful.