Skip to content

Port mmiotrace to ARM #2

Open
Open
@neuschaefer

Description

@neuschaefer

mmiotrace can be useful in RE'ing closed-source kernel modules. It works by marking pages mapped for MMIO (via ioremap) as invalid in the pagetable, and catching the resulting page faults. The implementation is spread over a few files:

mmiotrace is currently tied to x86, but it doesn't have to be.

Action plan

  • Move testmmiotrace.c to common code, as it isn't x86-specific
  • Copy kmmio.c and mmio-mod.c to ARM, with a few adjustments
  • Write instruction decoder for ARM

Other considerations

  • Not sure about the use of DR_STEP (single stepping mode)
  • avoid too much code duplication :)

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions