Address trace when breakpoint is triggered

[ghost]

When a breakpoint is triggered, is there a way to get a list of the basic blocks / branches executed up to that point? I know with a Path, we can use addr_trace. But with a State when the breakpoint is hit, is there a way to get the associated Path and its address trace?

[zardus]

This is currently one of the side-effects of the awkward angr-simuvex division. With this design, there is no way to do this (though various people put in various workarounds). It's probably little consolation to you at the moment, but this is something that'll be changed in the coming months, and will be much easier with angr version 7 or so.