search for: euspectre

On Fri, 25 Oct 2013 17:19:56 +0400 Eugene Shatokhin <euspectre at gmail.com> wrote: > Hi, > > 2013/10/25 Pekka Paalanen <pq at iki.fi> > ... > > We could use some comments from the real reverse-engineers. I used > > to be mostly a tool writer. > > > > Yes, if some experts could share their knowledge of this matt...

On Mon, 14 Oct 2013 22:45:09 +0400 Eugene Shatokhin <euspectre at gmail.com> wrote: > Hi, > > There is an interesting TODO item on MmioTraceDeveloper page: > "kprobes has a generic instruction decoding facility, use that instead of > homebrewn (or KVM), and use emulation instead of page faulting" > > Actually, I have done s...

On Fri, 18 Oct 2013 00:11:15 +0400 Eugene Shatokhin <euspectre at gmail.com> wrote: > Hi, > > Good to know that! > > Yes, it should be faster than page faulting, although I haven't done the > benchmarking yet. And yes, it is not needed to disable all but one CPU. In > my current implementation, I use an ordered workqueue to send...

On Sat, 19 Oct 2013 17:12:20 +0400 Eugene Shatokhin <euspectre at gmail.com> wrote: > Hi, > > > Ah, you are not using the ftrace framework nor relayfs? Mmiotrace > used to be relayfs at one point and then converted to ftrace. > > Yes, I considered these when I started working on KernelStrider but finally > borrowed ideas from Pe...

...ctions when accessing ioremapped memory, do they? Such things are rare in the kernel and usually frowned upon so I opted not to handle them so far in KernelStrider. Regards, Eugene 2013/10/17 Pekka Paalanen <pq at iki.fi> > On Mon, 14 Oct 2013 22:45:09 +0400 > Eugene Shatokhin <euspectre at gmail.com> wrote: > > > Hi, > > > > There is an interesting TODO item on MmioTraceDeveloper page: > > "kprobes has a generic instruction decoding facility, use that instead of > > homebrewn (or KVM), and use emulation instead of page faulting" > &...

Hi, 2013/10/25 Pekka Paalanen <pq at iki.fi> > > Just curious, how do you detect interesting instructions to > instrument from uninteresting instructions that do not access mmio > areas? > > As I currently use this for data race detection in general, there is no need to separate accesses to mmio areas from the accesses to other memory. The tool just tracks all except the

Hi, > Ah, you are not using the ftrace framework nor relayfs? Mmiotrace used to be relayfs at one point and then converted to ftrace. Yes, I considered these when I started working on KernelStrider but finally borrowed ideas from Perf and implemented them. A mmapped ring buffer does its job well and has a higher throughput than Ftrace in my case. > Are you saying that you intercept