A question regarding the installation of the ECMA-SL dependency

[guiyi-he]

Hello explode-js authors,

Thank you for developing such an excellent tool. I've been reading your paper and was excited to set up and run explode-js in my local environment (Ubuntu).

I encountered a problem while trying to install the project dependencies using opam. When I run the command to pin the ECMA-SL dependency as instructed:

opam pin add ecma-sl git+ssh://git@github.com/formalsec/ECMA-SL.git#v1.4.0

I receive the following error, which indicates that the repository could not be found:

[ERROR] Could not synchronize /home/dayshift/.opam/5.3.0/.opam-switch/sources/ecma-sl from git+ssh://git@github.com/formalsec/ECMA-SL.git#v1.4.0": /usr/bin/git fetch -q "origin" exited with code 128 "ERROR: Repository not found.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists."

[ecma-sl.~dev] fetching sources failed: git+ssh://git@github.com/formalsec/ECMA-SL.git#v1.4.0
[ERROR] Error getting source from git+ssh://git@github.com/formalsec/ECMA-SL.git#v1.4.0: git+ssh://git@github.com/formalsec/ECMA-SL.git#v1.4.0

Based on the ERROR: Repository not found message, it seems that opam is unable to locate the repository at the specified address (github.com/formalsec/ECMA-SL.git).

I was hoping to ask if the URL for the ECMA-SL dependency has recently changed, or if the repository might have been made private. If so, would there be an alternative installation method or an updated address you could provide?

Thank you again for your great work on this tool, and for your time and help.

[filipeom]

Hi!

Thanks for your interest in the paper and in explode-js! Currently, the main branch of explode-js tracks the development version of ECMA-SL. This version is part of an ongoing parallel paper submission, so I'm unable to share it at this time.

However, we have a public version of ECMA-SL available here: formalsec/ECMA-SL-pub. This is what powers the latest explode-js release. If you'd like to work with it, you can simply use the latest release of explode-js. To set it up, run:

$ git clone https://github.com/formalsec/explode-js.git
$ cd explode-js
$ git checkout v1.3.2
$ git submodule update --init
$ ./setup.ml

Alternatively, you can use the pre-built Docker images available here.
Instructions for pulling the image are provided at the top of the page.

Hope this helps!
Let me know if you run into any issues.

A small disclaimer: Since ECMA-SL is still under submission to another conference, the public version is currently limited and only allows you to reproduce the results from the explode-js paper. We hope to publish the ECMA-SL paper in the coming months, which will allow us to open-source the development version of ECMA-SL. This will make explode-js both more expressive and faster.

[guiyi-he]

Description

First, thank you for your great work on this project. I recently pulled the ghcr.io/formalsec/explode-js:1.3.2 image to try it out.

To verify the integrity of the provided environment, I entered the container and attempted to run the test suite via dune runtest from the project's source directory, but the process failed.

• Image Version: ghcr.io/formalsec/explode-js:1.3.2 (Image ID: 39d938de13f5)

• Steps to Reproduce:

1. Start an interactive session in the container with docker run -it --rm ghcr.io/formalsec/explode-js:1.3.2 bash.

2. Inside the container, navigate to the source directory: cd explode-js/.

3. Run the test suite: dune runtest.

• Expected Behavior:
  The test suite should run and pass successfully.

• Actual Behavior:
  The tests fail with errors indicating that the mdx library and ocaml-mdx program are missing. Additionally, several cram tests show unexpected diffs in their output.

Error Log

Here is the full output from dune runtest:

explodejs@60875ccbb66b:~/explode-js$ dune runtest
File "example/code-injection/dune", lines 1-6, characters 0-92:
Error: Library "mdx.top" not found.
-> required by _build/default/example/code-injection/mdx_gen.bc.exe
...
File "example/code-injection/dune", lines 1-6, characters 0-92:
Error: Program ocaml-mdx not found in the tree or in PATH
 (context: default)
Hint: opam install mdx
...
File "test/exploit/test_timeout.t", line 1, characters 0-0:
diff --git a/.../test_timeout.t b/.../test_timeout.t.corrected
index 842c932..b11e265 100644
--- a/_build/.sandbox/843a50ff5d6b9d4b55373fa3072e56da/default/test/exploit/test_timeout.t
+++ b/_build/.sandbox/843a50ff5d6b9d4b55373fa3072e56da/default/test/exploit/test_timeout.t.corrected
@@ -1,9 +1,6 @@
 Test that timeout works:
  $ explode-js exploit --deterministic --timeout 5 test_timeout.js
  ├── Symbolic execution output:
- Abort: "Uncaught SyntaxError: Must include statements to encode"
- ├── ⚠ Detected 1 issue(s)!
- │   ├── ↺ Replaying 1 test case(s)
- │   │   ├── 📄 [1/1] Using test case: _results/test_timeout/test-suite/witness-0.json
- │   │   │   ├── Node exited with 1
- │   │   │   └── ✖ Status: No side effect
+ Failure: "Function __esl_symbolic_seal_properties is currently hidden!"
+ error: "Function __esl_symbolic_seal_properties is currently hidden!"
+ [1]
... (and other diffs)

Analysis and Suggestion

Based on the error messages Error: Library "mdx.top" not found. and the Hint: opam install mdx, it appears the core issue is that the mdx opam package is not installed in the Docker image. This causes all tests that rely on mdx (likely for validating code blocks in documentation) to fail.

I would suggest adding opam install mdx to the Dockerfile to ensure the testing environment is complete.

As a workaround, I am now attempting to build from a source clone and manually installing the dependencies.

Thanks again for all your hard work. I hope this feedback helps improve the project!

[guiyi-he]

Thanks for your response. I have successfully compiled the source code now. Here is the error I'm encountering. Does Neo4j require manual configuration on my end?"

(base) dayshift@dayshift:~/explode-js$ dune runtest
File "example/command-injection/README.md", line 1, characters 0-0:
diff --git a/_build/default/example/command-injection/README.md b/_build/default/example/command-injection/.mdx/README.md.corrected
index 4254bf1..b9a1541 100644
--- a/_build/default/example/command-injection/README.md
+++ b/_build/default/example/command-injection/.mdx/README.md.corrected
@@ -7,44 +7,23 @@ $ explode-js full index.js
 [STEP 1] MDG: Completed.
 [STEP 2] Queries: Importing the graph...
 [INFO] Stop running Neo4j local instance.
-[INFO] Import MDG to Neo4j.
-[INFO] Starting Neo4j
-[STEP 2] Queries: Imported
-[STEP 3] Queries: Traversing Graph...
-[INFO] Running injection query.
-[INFO] Reconstructing attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Running prototype pollution query.
-[INFO] Prototype Pollution - Reconstructing attacker-controlled data.
-[INFO] Detected 1 vulnerabilities.
-[STEP 3] Queries: Completed.
-── PHASE 1: TEMPLATE GENERATION ──
-✔ Loaded: _results/taint_summary.json
-⚒ Generating 1 template(s):
-├── 📄 ./symbolic_test_0.js
-
-── PHASE 2: ANALYSIS & VALIDATION ──
-◉ [1/1] Procesing ./symbolic_test_0.js
-├── Symbolic execution output:
-"Uncaught TypeError"
-"Uncaught TypeError"
-"File too big"
-Exec failure: (str.++ ("rsync -av /tmp/0 ", id, "@", host, ":", dstDir))
-├── Symbolic execution stats: clock: 43.508250s | solver: 43.141939s
-├── ⚠ Detected 1 issue(s)!
-│   ├── ↺ Replaying 2 test case(s)
-│   │   ├── 📄 [1/2] Using test case: ./symbolic_test_0/test-suite/witness-0.json
-│   │   │   ├── Node exited with 0
-│   │   │   └── ✔ Status: Success (created file "./success")
+Traceback (most recent call last):
+  File "/home/dayshift/explode-js/_build/install/default/bin/graphjs", line 196, in <module>
+    run_graph_js(args.file, args.output, args.query_type, args.with_types, args.exploit, args.silent, args.dirty, args.optimized)
+  File "/home/dayshift/explode-js/_build/install/default/bin/graphjs", line 188, in run_graph_js
+    run_queries(file_path, graph_output, run_output, summary_path, time_output,
+  File "/home/dayshift/explode-js/_build/install/default/bin/graphjs", line 144, in run_queries
+    neo4j_management.import_csv_local(graph_path, run_path)
+  File "/home/dayshift/explode-js/_build/default/vendor/graphjs/detection/neo4j_import/neo4j_management.py", line 79, in import_csv_local
+    utils.launch_process("neo4j", "stop", neo4j_stop_path)
+  File "/home/dayshift/explode-js/_build/default/vendor/graphjs/detection/utils.py", line 11, in launch_process
+    process = subprocess.Popen(command_args, stdout=subprocess.PIPE, stderr=subprocess.STDOUT)
+              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+  File "/home/dayshift/anaconda3/lib/python3.12/subprocess.py", line 1026, in __init__
+    self._execute_child(args, executable, preexec_fn, close_fds,
+  File "/home/dayshift/anaconda3/lib/python3.12/subprocess.py", line 1955, in _execute_child
+    raise child_exception_type(errno_num, err_msg, err_filename)
+FileNotFoundError: [Errno 2] No such file or directory: 'neo4j'
+error: Graphjs exited with non-zero code: 1
+[1]
 ```bash
```bash
File "example/code-injection/README.md", line 1, characters 0-0:
diff --git a/_build/default/example/code-injection/README.md b/_build/default/example/code-injection/.mdx/README.md.corrected
index 9f98240..ba9260e 100644
--- a/_build/default/example/code-injection/README.md
+++ b/_build/default/example/code-injection/.mdx/README.md.corrected
@@ -7,77 +7,23 @@ $ explode-js full index.js
 [STEP 1] MDG: Completed.
 [STEP 2] Queries: Importing the graph...
 [INFO] Stop running Neo4j local instance.
-[INFO] Import MDG to Neo4j.
-[INFO] Starting Neo4j
-[STEP 2] Queries: Imported
-[STEP 3] Queries: Traversing Graph...
-[INFO] Running injection query.
-[INFO] Reconstructing attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Running prototype pollution query.
-[INFO] Prototype Pollution - Reconstructing attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Detected 7 vulnerabilities.
-[STEP 3] Queries: Completed.
-── PHASE 1: TEMPLATE GENERATION ──
-✔ Loaded: _results/taint_summary.json
-⚒ Generating 28 template(s):
-├── 📄 ./symbolic_test_0.js
-├── 📄 ./symbolic_test_1.js
-├── 📄 ./symbolic_test_2.js
-├── 📄 ./symbolic_test_3.js
-├── 📄 ./symbolic_test_4.js
-├── 📄 ./symbolic_test_5.js
-├── 📄 ./symbolic_test_6.js
-├── 📄 ./symbolic_test_7.js
-├── 📄 ./symbolic_test_8.js
-├── 📄 ./symbolic_test_9.js
-├── 📄 ./symbolic_test_10.js
-├── 📄 ./symbolic_test_11.js
-├── 📄 ./symbolic_test_12.js
-├── 📄 ./symbolic_test_13.js
-├── 📄 ./symbolic_test_14.js
-├── 📄 ./symbolic_test_15.js
-├── 📄 ./symbolic_test_16.js
-├── 📄 ./symbolic_test_17.js
-├── 📄 ./symbolic_test_18.js
-├── 📄 ./symbolic_test_19.js
-├── 📄 ./symbolic_test_20.js
-├── 📄 ./symbolic_test_21.js
-├── 📄 ./symbolic_test_22.js
-├── 📄 ./symbolic_test_23.js
-├── 📄 ./symbolic_test_24.js
-├── 📄 ./symbolic_test_25.js
-├── 📄 ./symbolic_test_26.js
-├── 📄 ./symbolic_test_27.js
-
-── PHASE 2: ANALYSIS & VALIDATION ──
-◉ [1/28] Procesing ./symbolic_test_0.js
-├── Symbolic execution output:
-Eval failure: (str.++ ("(",
-               (str.substr dp0 13
-                (int.add
-                 (int.sub
-                  (int.reinterpret_float
-                   (real.reinterpret_int (str.length dp0))) 13) 1)), ")"))
-├── Symbolic execution stats: clock: 32.300943s | solver: 31.997247s
-├── ⚠ Detected 1 issue(s)!
-│   ├── ↺ Replaying 4 test case(s)
-│   │   ├── 📄 [1/4] Using test case: ./symbolic_test_0/test-suite/witness-0.json
-│   │   │   ├── Node exited with 1
-│   │   │   └── ✖ Status: No side effect
-│   │   ├── 📄 [2/4] Using test case: ./symbolic_test_0/test-suite/witness-1.json
-│   │   │   ├── Node exited with 0
-│   │   │   └── ✔ Status: Success ("success" in stdout)
-│   │   ├── 📄 [3/4] Using test case: ./symbolic_test_0/test-suite/witness-2.json
-│   │   │   ├── Node exited with 0
-│   │   │   └── ✔ Status: Success ("success" in stdout)
+Traceback (most recent call last):
+  File "/home/dayshift/explode-js/_build/install/default/bin/graphjs", line 196, in <module>
+    run_graph_js(args.file, args.output, args.query_type, args.with_types, args.exploit, args.silent, args.dirty, args.optimized)
+  File "/home/dayshift/explode-js/_build/install/default/bin/graphjs", line 188, in run_graph_js
+    run_queries(file_path, graph_output, run_output, summary_path, time_output,
+  File "/home/dayshift/explode-js/_build/install/default/bin/graphjs", line 144, in run_queries
+    neo4j_management.import_csv_local(graph_path, run_path)
+  File "/home/dayshift/explode-js/_build/default/vendor/graphjs/detection/neo4j_import/neo4j_management.py", line 79, in import_csv_local
+    utils.launch_process("neo4j", "stop", neo4j_stop_path)
+  File "/home/dayshift/explode-js/_build/default/vendor/graphjs/detection/utils.py", line 11, in launch_process
+    process = subprocess.Popen(command_args, stdout=subprocess.PIPE, stderr=subprocess.STDOUT)
+              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+  File "/home/dayshift/anaconda3/lib/python3.12/subprocess.py", line 1026, in __init__
+    self._execute_child(args, executable, preexec_fn, close_fds,
+  File "/home/dayshift/anaconda3/lib/python3.12/subprocess.py", line 1955, in _execute_child
+    raise child_exception_type(errno_num, err_msg, err_filename)
+FileNotFoundError: [Errno 2] No such file or directory: 'neo4j'
+error: Graphjs exited with non-zero code: 1
+[1]
 ```bash
File "example/path-traversal/README.md", line 1, characters 0-0:
diff --git a/_build/default/example/path-traversal/README.md b/_build/default/example/path-traversal/.mdx/README.md.corrected
index 211f2a0..fca3a90 100644
--- a/_build/default/example/path-traversal/README.md
+++ b/_build/default/example/path-traversal/.mdx/README.md.corrected
@@ -7,28 +7,23 @@ $ explode-js full index.js
 [STEP 1] MDG: Completed.
 [STEP 2] Queries: Importing the graph...
 [INFO] Stop running Neo4j local instance.
-[INFO] Import MDG to Neo4j.
-[INFO] Starting Neo4j
-[STEP 2] Queries: Imported
-[STEP 3] Queries: Traversing Graph...
-[INFO] Running injection query.
-[INFO] Reconstructing attacker-controlled data.
-[INFO] Running prototype pollution query.
-[INFO] Prototype Pollution - Reconstructing attacker-controlled data.
-[INFO] Detected 1 vulnerabilities.
-[STEP 3] Queries: Completed.
-── PHASE 1: TEMPLATE GENERATION ──
-✔ Loaded: _results/taint_summary.json
-⚒ Generating 1 template(s):
-
-── PHASE 2: ANALYSIS & VALIDATION ──
-◉ [1/1] Procesing index.js
-├── Symbolic execution output:
-ReadFile failure: (str.++ ("./", request.url))
-├── Symbolic execution stats: clock: 0.266454s | solver: 0.003516s
-├── ⚠ Detected 1 issue(s)!
-│   ├── ↺ Replaying 1 test case(s)
-│   │   ├── 📄 [1/1] Using test case: ./index/test-suite/witness-0.json
-│   │   │   ├── Node exited with 0
-│   │   │   └── ✔ Status: Success (undesired file access occurred)
+Traceback (most recent call last):
+  File "/home/dayshift/explode-js/_build/install/default/bin/graphjs", line 196, in <module>
+    run_graph_js(args.file, args.output, args.query_type, args.with_types, args.exploit, args.silent, args.dirty, args.optimized)
+  File "/home/dayshift/explode-js/_build/install/default/bin/graphjs", line 188, in run_graph_js
+    run_queries(file_path, graph_output, run_output, summary_path, time_output,
+  File "/home/dayshift/explode-js/_build/install/default/bin/graphjs", line 144, in run_queries
+    neo4j_management.import_csv_local(graph_path, run_path)
+  File "/home/dayshift/explode-js/_build/default/vendor/graphjs/detection/neo4j_import/neo4j_management.py", line 79, in import_csv_local
+    utils.launch_process("neo4j", "stop", neo4j_stop_path)
+  File "/home/dayshift/explode-js/_build/default/vendor/graphjs/detection/utils.py", line 11, in launch_process
+    process = subprocess.Popen(command_args, stdout=subprocess.PIPE, stderr=subprocess.STDOUT)
+              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+  File "/home/dayshift/anaconda3/lib/python3.12/subprocess.py", line 1026, in __init__
+    self._execute_child(args, executable, preexec_fn, close_fds,
+  File "/home/dayshift/anaconda3/lib/python3.12/subprocess.py", line 1955, in _execute_child
+    raise child_exception_type(errno_num, err_msg, err_filename)
+FileNotFoundError: [Errno 2] No such file or directory: 'neo4j'
+error: Graphjs exited with non-zero code: 1
+[1]
``` ```bash
File "example/prototype-pollution/README.md", line 1, characters 0-0:
diff --git a/_build/default/example/prototype-pollution/README.md b/_build/default/example/prototype-pollution/.mdx/README.md.corrected
index 7c69a92..ab8f3fd 100644
--- a/_build/default/example/prototype-pollution/README.md
+++ b/_build/default/example/prototype-pollution/.mdx/README.md.corrected
@@ -7,43 +7,23 @@ $ explode-js full index.js
 [STEP 1] MDG: Completed.
 [STEP 2] Queries: Importing the graph...
 [INFO] Stop running Neo4j local instance.
-[INFO] Import MDG to Neo4j.
-[INFO] Starting Neo4j
-[STEP 2] Queries: Imported
-[STEP 3] Queries: Traversing Graph...
-[INFO] Running injection query.
-[INFO] Reconstructing attacker-controlled data.
-[INFO] Running prototype pollution query.
-[INFO] Prototype Pollution - Reconstructing attacker-controlled data.
-[INFO] Assigning types to attacker-controlled data.
-[INFO] Detected 1 vulnerabilities.
-[STEP 3] Queries: Completed.
-── PHASE 1: TEMPLATE GENERATION ──
-✔ Loaded: _results/taint_summary.json
-⚒ Generating 2 template(s):
-├── 📄 ./symbolic_test_0.js
-├── 📄 ./symbolic_test_1.js
-
-── PHASE 2: ANALYSIS & VALIDATION ──
-◉ [1/2] Procesing ./symbolic_test_0.js
-├── Symbolic execution output:
-├── Symbolic execution stats: clock: 0.438087s | solver: 0.104111s
-└── ✔ No issues detected.
-◉ [2/2] Procesing ./symbolic_test_1.js
-├── Symbolic execution output:
-"Uncaught TypeError"
-"Uncaught TypeError"
-"Uncaught TypeError"
-"Uncaught TypeError"
-"Uncaught TypeError"
-"Uncaught TypeError"
-"Uncaught TypeError"
-"Uncaught TypeError"
-Abort: "Uncaught Error: I pollute."
-├── Symbolic execution stats: clock: 7.269718s | solver: 6.420542s
-├── ⚠ Detected 1 issue(s)!
-│   ├── ↺ Replaying 1 test case(s)
-│   │   ├── 📄 [1/1] Using test case: ./symbolic_test_1/test-suite/witness-0.json
-│   │   │   ├── Node exited with 1
-│   │   │   └── ✔ Status: Success (threw Error("I pollute."))
+Traceback (most recent call last):
+  File "/home/dayshift/explode-js/_build/install/default/bin/graphjs", line 196, in <module>
+    run_graph_js(args.file, args.output, args.query_type, args.with_types, args.exploit, args.silent, args.dirty, args.optimized)
+  File "/home/dayshift/explode-js/_build/install/default/bin/graphjs", line 188, in run_graph_js
+    run_queries(file_path, graph_output, run_output, summary_path, time_output,
+  File "/home/dayshift/explode-js/_build/install/default/bin/graphjs", line 144, in run_queries
+    neo4j_management.import_csv_local(graph_path, run_path)
+  File "/home/dayshift/explode-js/_build/default/vendor/graphjs/detection/neo4j_import/neo4j_management.py", line 79, in import_csv_local
+    utils.launch_process("neo4j", "stop", neo4j_stop_path)
+  File "/home/dayshift/explode-js/_build/default/vendor/graphjs/detection/utils.py", line 11, in launch_process
+    process = subprocess.Popen(command_args, stdout=subprocess.PIPE, stderr=subprocess.STDOUT)
+              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+  File "/home/dayshift/anaconda3/lib/python3.12/subprocess.py", line 1026, in __init__
+    self._execute_child(args, executable, preexec_fn, close_fds,
+  File "/home/dayshift/anaconda3/lib/python3.12/subprocess.py", line 1955, in _execute_child
+    raise child_exception_type(errno_num, err_msg, err_filename)
+FileNotFoundError: [Errno 2] No such file or directory: 'neo4j'
+error: Graphjs exited with non-zero code: 1
+[1]

File "example/package-example/README.md", line 1, characters 0-0:
diff --git a/_build/default/example/package-example/README.md b/_build/default/example/package-example/.mdx/README.md.corrected
index 574d989..ceeeaf1 100644
--- a/_build/default/example/package-example/README.md
+++ b/_build/default/example/package-example/.mdx/README.md.corrected
@@ -3,24 +3,6 @@

$ explode-js package
── PHASE 0: VULNERABILITY DETECTION ──
-Detected 1 potential issue(s):
-├── Issue 0: command-injection @ /home/filipe/projects/explode-js/_build/default/example/package-example/_results/20250512T211823/index.js:10
-│   └── 10|  return exec(command);
-
-── PHASE 1: TEMPLATE GENERATION ──
-✔ Loaded: ./taint_summary.json
-⚒ Generating 1 template(s):
-├── 📄 ./symbolic_test_0.js
-
-── PHASE 2: ANALYSIS & VALIDATION ──
-◉ [1/1] Procesing ./symbolic_test_0.js
-├── Symbolic execution output:
-"File too big"
-Exec failure: (str.++ ("rsync -av /tmp/0 ", userId, "@", host, ":", usrDir))
-├── Symbolic execution stats: clock: 40.317392s | solver: 39.864743s
-├── ⚠ Detected 1 issue(s)!
-│   ├── ↺ Replaying 2 test case(s)
-│   │   ├── 📄 [1/2] Using test case: ./symbolic_test_0/test-suite/witness-0.json
-│   │   │   ├── Node exited with 0
-│   │   │   └── ✔ Status: Success (created file "./success")
+error: Graphjs exited with non-zero code: 1
+[1]

File "test/exploit/test_timeout.t", line 1, characters 0-0:
diff --git a/_build/.sandbox/55eec991cb5361ddb85a0947aad095b1/default/test/exploit/test_timeout.t b/_build/.sandbox/55eec991cb5361ddb85a0947aad095b1/default/test/exploit/test_timeout.t.corrected
index 842c932..b11e265 100644
--- a/_build/.sandbox/55eec991cb5361ddb85a0947aad095b1/default/test/exploit/test_timeout.t
+++ b/_build/.sandbox/55eec991cb5361ddb85a0947aad095b1/default/test/exploit/test_timeout.t.corrected
@@ -1,9 +1,6 @@
 Test that timeout works:
   $ explode-js exploit --deterministic --timeout 5 test_timeout.js
   ├── Symbolic execution output:
-  Abort: "Uncaught SyntaxError: Must include statements to encode"
-  ├── ⚠ Detected 1 issue(s)!
-  │   ├── ↺ Replaying 1 test case(s)
-  │   │   ├── 📄 [1/1] Using test case: _results/test_timeout/test-suite/witness-0.json
-  │   │   │   ├── Node exited with 1
-  │   │   │   └── ✖ Status: No side effect
+  Failure: "Function __esl_symbolic_seal_properties is currently hidden!"
+  error: "Function __esl_symbolic_seal_properties is currently hidden!"
+  [1]
File "test/exploit/test_exploit.t", line 1, characters 0-0:
diff --git a/_build/.sandbox/594f7f4125807b086d284c5f5216b990/default/test/exploit/test_exploit.t b/_build/.sandbox/594f7f4125807b086d284c5f5216b990/default/test/exploit/test_exploit.t.corrected
index 1a3e849..1245cdc 100644
--- a/_build/.sandbox/594f7f4125807b086d284c5f5216b990/default/test/exploit/test_exploit.t
+++ b/_build/.sandbox/594f7f4125807b086d284c5f5216b990/default/test/exploit/test_exploit.t.corrected
@@ -1,14 +1,9 @@
 Test symbolic argv:
   $ explode-js exploit --deterministic test_sink_argv.js
   ├── Symbolic execution output:
-  "":83264.2-83264.20: Assert failure:
-   Stmt: assert (hd params)
-   Expr: false
-  ├── ⚠ Detected 1 issue(s)!
-  │   ├── ↺ Replaying 1 test case(s)
-  │   │   ├── 📄 [1/1] Using test case: _results/test_sink_argv/test-suite/witness-0.json
-  │   │   │   ├── Node exited with 0
-  │   │   │   └── ✖ Status: No side effect
+  Failure: "Function __esl_symbolic_assert is currently hidden!"
+  error: "Function __esl_symbolic_assert is currently hidden!"
+  [1]
 
 Test eval and Function explode:
   $ explode-js exploit --deterministic test_sink_eval.js
@@ -73,25 +68,21 @@ Test readFile explode
 Test polluted explode:
   $ explode-js exploit --deterministic test_pollution_1.js
   ├── Symbolic execution output:
-  └── ✔ No issues detected.
+  Failure: "Function __esl_symbolic_seal_properties is currently hidden!"
+  error: "Function __esl_symbolic_seal_properties is currently hidden!"
+  [1]
 
   $ explode-js exploit --deterministic test_pollution_2.js
   ├── Symbolic execution output:
-  Abort: "Prototype pollution detected!"
-  ├── ⚠ Detected 1 issue(s)!
-  │   ├── ↺ Replaying 1 test case(s)
-  │   │   ├── 📄 [1/1] Using test case: _results/test_pollution_2/test-suite/witness-0.json
-  │   │   │   ├── Node exited with 0
-  │   │   │   └── ✔ Status: Success ("polluted" in stdout)
+  Failure: "Function __esl_symbolic_seal_properties is currently hidden!"
+  error: "Function __esl_symbolic_seal_properties is currently hidden!"
+  [1]
 
   $ explode-js exploit --deterministic test_pollution_3.js
   ├── Symbolic execution output:
-  Abort: "Prototype pollution detected!"
-  ├── ⚠ Detected 1 issue(s)!
-  │   ├── ↺ Replaying 1 test case(s)
-  │   │   ├── 📄 [1/1] Using test case: _results/test_pollution_3/test-suite/witness-0.json
-  │   │   │   ├── Node exited with 0
-  │   │   │   └── ✔ Status: Success ("polluted" in stdout)
+  Failure: "Function __esl_symbolic_seal_properties is currently hidden!"
+  error: "Function __esl_symbolic_seal_properties is currently hidden!"
+  [1]
 
   $ explode-js exploit --deterministic test_pollution_4.js
   ├── Symbolic execution output:

[filipeom]

Regarding #71 (comment) I've opened a separate issue here: #76 as it is a different problem.

Regarding this:

Thanks for your response. I have successfully compiled the source code now. Here is the error I'm encountering. Does Neo4j require manual configuration on my end?"

Yes, unfortunately, I forgot to update the README with instructions about the requirement to install Neo4j. However, on Ubuntu, you can do so by running the following commands:

$ wget -O - https://debian.neo4j.com/neotechnology.gpg.key | apt-key add - && \
    echo 'deb https://debian.neo4j.com stable 5' | tee -a /etc/apt/sources.list.d/neo4j.list && \
    apt-get update && \
    apt-get install -y neo4j=1:5.26.4 && \
    echo dbms.security.auth_enabled=false >> /etc/neo4j/neo4j.conf && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/* && \
    chown -R neo4j:neo4j /var/lib/neo4j && \
    chown -R neo4j:neo4j /var/log/neo4j && \
    chmod -R g+rw /var/lib/neo4j && \
    chmod -R g+rw /var/log/neo4j

You will also need to add your user to the neo4j group:

$ usermod -aG neo4j <YOUR USER>
$ newgrp neo4j # login to group, or reboot

IMPORTANT: Note that, running neo4j as root is not recommended and will most likely break your neo4j installation.

I've created #74 to update the README and will promptly do so.

Thanks for the feedback!

Let me know if you encounter further issues