May 19, 2026
Goals
- Find out more exploitable regions inside the
libtriton.solibrary.
What I worked on
- Created framework called
chitraguptfor figuring out the location of the matcherTable which is used to convertLLVM IRtoptx- The framework also has provision to integrate targets other than
NVPTXlikeAMDGPUetc.
Key Insights
- In triton each version is bound to a specific commit hash in the LLVM project and this commit hash is stored in the
cmake/llvm-hash.txtfile in thetritonlibrary.- The exact commit hash can also be found out using
libtriton.sowith the commandstrings libtriton.so | grep -E "LLVM.*git|clang.*git|llvmorg"
Questions / Confusions
- I still need to how predicate in ptx can be manipulated to skip instructions.
Ideas / Hypotheses
- I can generalize the attack surface of LLVM to different
targetslikeAMDGPU,RISC-Vetc.
Papers / Resources
None
Next Steps
- Create an end-to-end automated framework for finding out the exploitable flips.
Introspection
- Today was a normal day nothing eventful.