[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PATCH v3 12/39] windbg: implement find_kdDebuggerDataBlock
From: |
Mikhail Abakumov |
Subject: |
[Qemu-devel] [PATCH v3 12/39] windbg: implement find_kdDebuggerDataBlock |
Date: |
Thu, 06 Dec 2018 14:59:46 +0300 |
User-agent: |
StGit/0.17.1-dirty |
It is necessary to find address on the structure kdDebuggerDataBlock,
which is located somewhere at kernel .data section.
We can find it in structure defined in kernel:
typedef struct _DBGKD_DEBUG_DATA_HEADER
{
LIST_ENTRY64 List;
ULONG OwnerTag;
ULONG Size;
} DBGKD_DEBUG_DATA_HEADER, *PDBGKD_DEBUG_DATA_HEEADER;
where OwnerTag == 'KDBG',
then List == kdDebuggerDataBlock.
Signed-off-by: Mikhail Abakumov <address@hidden>
Signed-off-by: Pavel Dovgalyuk <address@hidden>
---
target/i386/windbgstub.c | 47 ++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 47 insertions(+)
diff --git a/target/i386/windbgstub.c b/target/i386/windbgstub.c
index dc58f5a8cc..f1bab10b10 100644
--- a/target/i386/windbgstub.c
+++ b/target/i386/windbgstub.c
@@ -14,6 +14,7 @@
#ifdef TARGET_X86_64
#define OFFSET_KPCR_SELF 0x18
+#define OFFSET_KPCR_LOCK_ARRAY 0x28
#else /* TARGET_I386 */
#define OFFSET_KPCR_SELF 0x1C
#define OFFSET_KPCR_VERSION 0x34
@@ -60,6 +61,52 @@ static bool find_KPCR(CPUState *cs)
#ifdef TARGET_X86_64
static bool find_kdDebuggerDataBlock(CPUState *cs)
{
+ target_ulong lockArray;
+ target_ulong dDataList;
+ const uint8_t tag[] = { 'K', 'D', 'B', 'G' };
+ target_ulong start = 0xfffff80000000000LL;
+ target_ulong finish = 0xfffff81000000000LL;
+ InitedAddr find;
+
+ /* kdDebuggerDataBlock is located in
+ - range of [0xfffff80000000000 ... 0xfffff81000000000]
+ - at offset of ('KDBG') - 0x10 */
+
+ if (!kdDebuggerDataBlock.is_init && KPCR.is_init) {
+ /* At first, find lockArray. If it is NULL,
+ then kdDebuggerDataBlock is also NULL (empirically). */
+ lockArray = VMEM_ADDR(cs, KPCR.addr + OFFSET_KPCR_LOCK_ARRAY);
+ if (!lockArray) {
+ return false;
+ }
+ DPRINTF("find LockArray " FMT_ADDR "\n", lockArray);
+
+ while (true) {
+ find = windbg_search_vmaddr(cs, start, finish, tag,
+ ARRAY_SIZE(tag));
+ if (!find.is_init) {
+ return false;
+ }
+
+ /* Valid address to 'KDBG ' is always aligned */
+ if (!(find.addr & 0xf)) {
+ dDataList = VMEM_ADDR(cs, find.addr - 0x10);
+
+ /* Valid address to 'dDataList ' is always
+ in range [0xfffff80000000000 ... 0xfffff8ffffffffff] */
+ if ((dDataList >> 40) == 0xfffff8) {
+ kdDebuggerDataBlock.addr = find.addr - 0x10;
+ kdDebuggerDataBlock.is_init = true;
+ DPRINTF("find kdDebuggerDataBlock " FMT_ADDR "\n",
+ kdDebuggerDataBlock.addr);
+ break;
+ }
+ }
+
+ start = find.addr + 0x8; /* next addr */
+ }
+ }
+
return kdDebuggerDataBlock.is_init;
}
#else /* TARGET_I386 */
- [Qemu-devel] [PATCH v3 02/39] windbg: add windbg's KD header file, (continued)
- [Qemu-devel] [PATCH v3 02/39] windbg: add windbg's KD header file, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 03/39] windbg: add -windbg option, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 04/39] windbg: add helper features, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 05/39] windbg: add WindbgState, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 06/39] windbg: add chardev, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 07/39] windbg: hook to wrmsr operation, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 08/39] windbg: implement windbg_on_load, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 09/39] windbg: implement find_KPCR, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 10/39] windbg: implement find_kdVersion, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 11/39] windbg: add windbg_search_vmaddr, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 12/39] windbg: implement find_kdDebuggerDataBlock,
Mikhail Abakumov <=
- [Qemu-devel] [PATCH v3 13/39] windbg: parsing data stream, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 14/39] windbg: send data and control packets, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 15/39] windbg: handler of parsing context, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 16/39] windbg: init DBGKD_ANY_WAIT_STATE_CHANGE, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 17/39] windbg: generate ExceptionStateChange and LoadSymbolsStateChange, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 18/39] windbg: implement windbg_process_control_packet, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 19/39] windbg: implement windbg_process_data_packet, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 20/39] windbg: implement windbg_process_manipulate_packet, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 21/39] windbg: implement kd_api_read_virtual_memory and kd_api_write_virtual_memory, Mikhail Abakumov, 2018/12/06
- [Qemu-devel] [PATCH v3 22/39] windbg: some kernel structures, Mikhail Abakumov, 2018/12/06