From: Nikita Gnilozub-Volobuev <nikitag594@gmail.com>
To: qemu-devel@nongnu.org
Subject: Problem with trace of x86 binary on x86_64 system with PANDA
Date: Fri, 30 Jul 2021 19:15:30 +0300 [thread overview]
Message-ID: <1b6189d1-0123-efa7-23b4-42b60cefebbe@gmail.com> (raw)
Hello there.
I'm a student and I'm writing my term paper. Part of it is the record
the trace of x86 ELF on x86_64 Linux. For record I use PANDA. And I
stacked with very strange problem: there is no system calls in my trace.
When I see this I was very surprised and make simple grabber of
translation blocks. As I know I must see in that sysenter (0x0F 0x34)
and int 0x80 (0xCD 0x80). But nothing of them was in my blocks. Maybe
trouble is in TCG? How I can test this and proxing system calls through
PANDA for analyze it?
For example what I mean: I have very stupid binary, it's just write
"Hello world" to file. But PANDA can't catch any calls. Even write
although it is clear that this call must be there.
--
With best wishes, Gnilozub-Volobuev N.I.
next reply other threads:[~2021-07-30 16:19 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-07-30 16:15 Nikita Gnilozub-Volobuev [this message]
2021-07-30 16:37 ` Problem with trace of x86 binary on x86_64 system with PANDA Peter Maydell
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1b6189d1-0123-efa7-23b4-42b60cefebbe@gmail.com \
--to=nikitag594@gmail.com \
--cc=qemu-devel@nongnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).