https://github.com/libvmi/libvmi

sort by:
Revision Author Date Message Commit Date
df8547f Set mem-range access, read wstrings, get last PF (#1095) * Fix calculation of address in dump_exports function * Fix default_access parameter when calling xen_altp2m_create_p2m * Fix error message and update debug print format * Add support for setting memory range access * Add support for reading wide character strings * Add last page table lookup fault functionality Currently there is no way how to determine which VA failed to translate (e.g. during reading large chunks of memory or strings). This information might be useful for a potential future #PF injection. This commit adds a function `vmi_get_last_pagetable_lookup_fault` which returns last faulting access_context_t (or NULL, if last access succeeded). 05 February 2024, 16:53:32 UTC
fba6232 driver_wrapper: fix debug prints (#1094) 15 January 2024, 12:52:11 UTC
8f37f07 Xen: fix calculation of ram size (#1092) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 27 December 2023, 00:12:57 UTC
071d81f Ensure that the third level descriptor is valid prior to returning (#1091) Co-authored-by: Trey Franklin <trey.franklin@dese.com> 20 December 2023, 18:01:58 UTC
a2438e8 CMake: Adjust scope of linked libraries (#1089) * Make json link library public * Remove libdl from list of public libraries --------- Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 19 December 2023, 12:24:05 UTC
d048e41 Kvm: Fix events not being processed during shutdown (#1038) * Fix events not being processed during shutdown * Dereference after null check --------- Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 13 December 2023, 18:55:18 UTC
782bfff Implement SLAT for kvm (#1043) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 13 December 2023, 15:30:19 UTC
9bf6b62 Fill offset field for singlestep events (#1088) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 11 December 2023, 14:47:55 UTC
72ef3aa Add missing event clear wiring (#1087) 06 December 2023, 15:14:39 UTC
e707440 Reduce cognitive complexity of kvm_events.c (#1086) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 23 November 2023, 13:28:49 UTC
bcc057c Add DIRTY bit definition (#1085) 21 November 2023, 21:49:36 UTC
12d3a8c Fix bug not looking up xc_domain_setmaxmem (#1084) 19 November 2023, 21:39:26 UTC
d4f95a5 New physical page api (#1083) * Add API for dynamic GFN allocation * Add API for retrieving next available gfn * Add new physical page example --------- Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 16 November 2023, 12:23:09 UTC
1b47190 Feature/osx_support (#1078) * private:Add `CHECK` macro * Initial OSX support * process_list: Add osx example --------- Co-authored-by: netanelc305 <netanelc305@pm.me> 02 November 2023, 12:58:25 UTC
b9691ca driver interface, xen driver: added prot flag to mmap interface (#1082) 18 October 2023, 13:27:56 UTC
f47a568 Xen 4.18 support (#1081) 11 October 2023, 16:15:50 UTC
0332ac2 fix KPCR read on Windows x86 (#1077) * fix KPCR read on Windows x86 * move KPCR read logic to separate kpcr_get and kpcr_get_x86 methods * pointer fix --------- Co-authored-by: Aleksandr Partanen <apartanen@ptsecurity.com> 04 October 2023, 11:54:20 UTC
3c42697 examples: add missing long_opts array terminator (#1079) 04 October 2023, 11:53:55 UTC
e2313cc Remove cached config entry as part of vmi_destroy function (#1076) * Remove hashed config entry as part of vmi_destroy function * Add check for ENABLE_CONFIGFILE flag before calling vmi_destroy_config * Change duplicate config message from stderr to debug --------- Co-authored-by: Trey Franklin <trey.franklin@dese.com> 07 September 2023, 17:21:23 UTC
8a79057 Use actions/checkout@v3 (#1075) 01 September 2023, 10:29:25 UTC
d5b0177 Sanitize input for PE parser (#1073) Co-authored-by: Thomas Dangl <thomas.dangl@protonmail.ch> 14 July 2023, 13:01:03 UTC
0f832eb Symbol RVA translation for ELF executables and shared libraries (#1072) * Skip consecutive PD/PT entries for Windows 10 in vmi_get_va_pages * Symbol RVA translation for ELF executables and shared libraries --------- Co-authored-by: INNOESX3 <smartvmi@fake.com> Co-authored-by: Thomas Dangl <thomas.dangl@protonmail.ch> 05 July 2023, 15:00:26 UTC
f2bfd4a Adding basic support for reading an ARM64 memory dump (#1070) * Adding basic support for reading an ARM64 memory dump * Addressing initial CI build failures * only parse config for aarch64 attributes if pagemode is aarch64 --------- Co-authored-by: Trey Franklin <trey.franklin@dese.com> 01 June 2023, 14:51:53 UTC
d2f3fe9 Change xen vbd state check from 1 to 4 (#1069) Co-authored-by: Trey Franklin <trey.franklin@dese.com> 01 June 2023, 12:43:55 UTC
9166fd6 Revise Xen minor version sanity checking logic (#1068) Co-authored-by: Trey Franklin <trey.franklin@dese.com> 26 May 2023, 18:49:11 UTC
79ace5c Fix documentation url (#1067) 17 May 2023, 15:47:57 UTC
c0edc27 Adjust xc_monitor_io availability (#1066) 11 May 2023, 13:28:08 UTC
3fe7e6e I/O event hooking, firmware type check (#1045) * Add I/O event support and Xen VM fimrware check * CodeQL fixes * Update on master; update io event structure * Fix Fall-through --------- Co-authored-by: Anton Belousov <blsvntn@outlook.com> 05 May 2023, 19:40:59 UTC
63a6a2d Split complexity from scan-build CI test (#1065) * Split complexity from scan-build CI test * Remove deprecated ubuntu 18.04 tests 01 May 2023, 22:37:25 UTC
a95e99e Calculate cognitive complexity score as part of scan-build (#1062) * Calculate cognitive complexity score as part of scan-build * Use clang-15 * Fix unsafe string functions * Don't analyze headers * Calculate final score * Error on increase in complexity 27 March 2023, 00:05:26 UTC
db93f47 Address to kernel symbol translation for windows (#1056) * Add reverse symbol table to json profile * Use json profile to implement address to kernel symbol for windows Co-authored-by: Henning Funke <henning.funke@gdata.de> 17 January 2023, 13:42:08 UTC
dd919a6 linux: use more strickt checks while initializing linux kaslr (#1060) * linux: use more strickt checks while initializing linux kaslr * Fix astyle 17 January 2023, 13:35:09 UTC
9dee43c Skip consecutive PD/PT entries for Windows 10 in vmi_get_va_pages (#1055) Co-authored-by: INNOESX3 <smartvmi@fake.com> 21 December 2022, 00:34:49 UTC
afb05d0 Fix x64 windows address translation (#1054) * Fix pdpte_location * Fix pfn mask for transition pages Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 21 December 2022, 00:34:09 UTC
5662dba Create SECURITY.md 17 December 2022, 01:36:16 UTC
36bcb2c Return success if whole region is unmapped (#1050) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 01 December 2022, 01:24:15 UTC
38ff0db Fix struct layout warning in kvm.c (#1051) * Fix struct layout warning in kvm.c * Cleanup * Cleanup * Cleanup * Add Ubuntu 22.04 to compile test * calloc null check 30 November 2022, 14:55:14 UTC
fecdb1f Revert "Revert "Limit single step dispatch to successful events to harmonize KVM / XEN behavior (#1040)" (#1047)" (#1049) This reverts commit 68a4a69b19991f74146401a41487b174522cf95d. 20 October 2022, 15:31:35 UTC
b26888c Rework mem-event-example (#1048) - use generic mem event - do not clear event in callback since this will result in unexpected behavior Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 11 October 2022, 11:35:01 UTC
68a4a69 Revert "Limit single step dispatch to successful events to harmonize KVM / XEN behavior (#1040)" (#1047) This reverts commit 78a95128f8f7f532c4c9ecf97a5e5d7f959ebe41. 03 October 2022, 19:11:22 UTC
546e2e3 Fix vmi_read_str on page boundary (#1046) 20 September 2022, 01:07:34 UTC
78a9512 Limit single step dispatch to successful events to harmonize KVM / XEN behavior (#1040) 05 August 2022, 10:49:57 UTC
7328e9e Fix memory cache remove (#1042) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 05 August 2022, 10:47:58 UTC
92f9f70 Kvm: Implement pause counter (#1039) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 12 July 2022, 14:28:41 UTC
50d256b Pop pending events after pausing vm (#1026) * Remove unused includes * Remove unnecessary indirections * Make sure all pause events are popped for resuming Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 02 June 2022, 00:01:22 UTC
0cb5db8 Add support for new Xen event type for vm exits (#1036) 19 May 2022, 20:20:10 UTC
5edc478 Kvm: Flush pages from memory cache after write operation (#1035) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 19 May 2022, 20:19:57 UTC
ff2c1c9 Fix memory corruption in kvm interrupt event handling (#1034) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 17 May 2022, 16:31:01 UTC
09be0ef cmake: add ZLIB detection (#1033) 13 May 2022, 14:35:21 UTC
932a87a vbd: fix uncompression of qcow2 cluster (#1032) 11 May 2022, 22:27:59 UTC
26152fc vbd: Add support for JSON format of qcow2 backing file description (#1030) * vbd: Add support for JSON format of qcow2 backing file description 'json:{"file": {"driver": "file", "filename": "/tmp/file.qcow2"}}' * Update vbd.c 11 May 2022, 18:54:35 UTC
afd541b vbd: Remove some copy-paste in qcow2 reading code (#1031) * vbd: Remove some copy-paste in qcow2 reading code * Update vbd.c * Update vbd.c 11 May 2022, 18:53:02 UTC
1d17c98 vbd: Fix memory leak in uncompress_cluster (#1029) 11 May 2022, 18:13:11 UTC
6859024 Fix vmi_init_paging issue on ARM64/ZCU102 (#1028) * Pass NULL to get_vcpu_page_mode instead of reference to vmi->page_mode * removing out_pm check from get_vcpu_page_mode_arm Co-authored-by: Trey Franklin <trey.franklin@dese.com> 10 May 2022, 22:45:19 UTC
710b0a5 Fix double free corruption (#1027) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 09 May 2022, 11:43:58 UTC
7c0c537 Kvm: Ensure monitor_intr_on ist set to false in error case (#1025) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 05 May 2022, 16:14:18 UTC
f51d3fd Add kvm support for swap/clear events (#1024) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 05 May 2022, 15:31:26 UTC
c87a1fb Remove xen includes from vbd.c (#1023) 13 April 2022, 12:49:09 UTC
45b32c0 Switch pid cache to g_direct_hash/equal (#1021) * Switch pid cache to g_direct_hash/equal * Fix style 05 April 2022, 23:37:01 UTC
f108304 Use g_direct_hash/equal everywhere (#1020) * Use g_direct_hash/equal everywhere * Remove unusud variable 05 April 2022, 20:45:55 UTC
b34cb61 Plug holes in events ABI and bump ABI version (#1019) 29 March 2022, 19:49:48 UTC
f9db2f4 Use g_direct_hash/direct_equal for generic mem_events (#1018) * Use g_direct_hash/direct_equal for generic mem_events * Switch reg/msr events to direct hash/equal * Switch interrupt events to direct hash/equal * Switch singlestep sevents to direct hash/equal * Switch clear_events to direct hash/equal * Switch rest of the events to direct hash/equal 29 March 2022, 19:33:22 UTC
41600b6 Actually define __XS_EVENT_REASON_MAX (#1016) 12 March 2022, 19:29:01 UTC
082cee0 Fix Xen xenstore event handling (#1015) 12 March 2022, 19:23:41 UTC
d93a76e cmake: fix build failure and update CI (#1014) * ci: fix failing the compile job on build failure * cmake: remove unused add_subdirectory command * cmake: set debug flags to match autotools configuration 11 March 2022, 21:29:39 UTC
e8bf0bc Cleanup vbd interface (#1012) 01 March 2022, 09:48:14 UTC
bdee00f Disk reading interface for Xen based VMs and example (#1010) * Disk reading interface for Xen based VMs and example * Replaced VBD specific code from xen to disk directory * Fixes: remove xen_* prefix from vbd functions, CI errors * Fix: disk offset parameter in read-disk-example * Fix: CI issues, potential memory leak * Fix: read-disk-example dump file permissions * Fix: checks for empty arguments * Make zlib dependency optional * Fix: conditional compilation * configure.ac: move HAVE_ZLIB definition to PKG_CHECK_MODULES * Fix: CentOS configure; remove unnecessary pre-processor flags * Fix: removed excessive xshandle opening 28 February 2022, 17:58:06 UTC
73ac298 Added possibility for init vmi library from specified config file (#1009) 19 January 2022, 19:05:56 UTC
f3a371c Fix static analyzer warning about usage of enum value in boolean cont… (#1007) * Fix static analyzer warning about usage of enum value in boolean context in ENTRY_PRESENT(vmi->os_type, ...) * Fix another Svace static analyzer warnings 30 December 2021, 17:58:11 UTC
6c4c0a6 Fix handling of glib libraries in cmake (#1002) (#1003) The `target_link_libraries` command is supposed to be called using the contents of `GLIB_LIBRARIES` instead of `GLIB_LDFLAGS`. Fixes: #1002 Signed-off-by: Björn Esser <besser82@fedoraproject.org> 30 December 2021, 15:57:38 UTC
e605f16 examples: fix mem-event-example.c (#1001) The mem-event-example would stall the guest CPU because it forgot to relax memory permission and advance the faulted CPU. This commit fixed this by borrowing the code from event-example, i.e., clearing the event, single step the vCPU and then re-register the event. 30 December 2021, 15:57:05 UTC
af0e392 bug fix for wrong free. (#1004) sry for upload a fix with bug because of not upload the newest local commit. 30 December 2021, 15:55:28 UTC
036bb7e fix memory leak in find_kdbg_address_faster (#1006) 30 December 2021, 15:54:36 UTC
17190c6 Update README.rst 15 November 2021, 01:51:16 UTC
76b3fea include libvmi.h in events.h (#995) 04 November 2021, 14:01:23 UTC
5e34909 address maybe uninitialized warnings (#997) Co-authored-by: Dorian Eikenberg <dorian.eikenberg@gdata.de> 04 November 2021, 13:57:52 UTC
35ed903 enable the kvm_legacy to fetch multicpu reg info (#994) * bug fix: set HAVE_LIBVMI_REQUEST ON while find it The variable in subdirectories cannot be found in parent subdirectories. That is, even if LibvmiRequest is found, HAVE_LIBVMI_REQUEST cannot be defined in config.h. It is a first-aid fix and the coding in cmake is not very pretty after the fix. I think the /CMakeLists.txt , /libvmi/CMakeLists.txt , and /cmake/modules/*.cmake should be optimized throughly in the future. * fix it by passing * bug fix: add '-lm' In kvm_legacy.c, there is a function 'ceil', which needs the library 'libm'. It seems that, without HAVE_LIBVMI_REQUEST, the branch to the function 'ceil' will be optimized by gcc. When I use cmake to test kvm_legacy with HAVE_LIBVMI_REQUEST(after I fix another bug), I meet the error with unreferenced symbol 'ceil'. To add the link library 'libm' can resolve it. * Create kvm-qemu-v2.12-libvmi.patch * enable the kvm_legacy to fetch multicpu reg info In kvm_legacy mode, the vmi_get_vcpureg API can only fetch reg info with cpu 0 because the inner implement unuse the argument "vcpu". The patch make up the flaw. * undo the mistake change The commit is accidently done. Undo it. 03 November 2021, 16:43:17 UTC
33b06ad allow targeting designated kernel source (#996) tools/linux-offset-finder: add a KERNEL variable to allow override the targeting kernel source 03 November 2021, 16:39:03 UTC
fad354b Add g_memdup_compat for g_memdup2 compatibility (#993) * Add g_memdup_compat for g_memdup2 compatibility * Add bookworm container to compile test 20 October 2021, 02:03:26 UTC
4344f15 add vmi-linux-offsets (#978) * add vmi-linux-offsets Signed-off-by: manorit chawdhry <manorit2001@gmail.com> * replace ghashtable with json path * remove VMI_PM_INITFLAG_TRANSITION_PAGES * refactor 20 October 2021, 01:51:16 UTC
ca71dfe Introduce kvmi support for vmifs (#992) * Off-by-one error in xen driver renders last physical page inaccessible * Introduce kvmi support for vmifs * Freeing init data on exit of vmifs 20 October 2021, 01:49:23 UTC
5f03ffb Install events.h for new kvm driver with autotools 06 October 2021, 16:14:29 UTC
4a40c3e Fix reading of long windows unicode strings (length > 4KiB). (#990) Add sanity check that length <= maximum_length. Co-authored-by: Dmitry Isaykin <disaykin@ptsecurity.com> 23 September 2021, 11:51:41 UTC
252f114 Fixed compilation test in container ubuntu:focal (#991) Co-authored-by: Dmitry Isaykin <disaykin@ptsecurity.com> 20 September 2021, 10:33:54 UTC
88d281d Don't include glib.h in an extern C block (#986) 13 August 2021, 16:36:10 UTC
3b6bad9 support vsock for kvmi (#983) 09 August 2021, 14:10:04 UTC
3bc0f98 Add vmi_get_struct_field_type_name (#984) * Add vmi_get_struct_field_type_name * fix comments 09 August 2021, 14:09:14 UTC
11f08ea fix issue#716 & 776 (#979) * fix issue#716 & 776 The address where we need to remove the cache is just the page address where we write. * whitespace update 09 August 2021, 12:38:49 UTC
79bd719 Use ubuntu focal instead of rolling in CI 04 June 2021, 12:06:44 UTC
50126b6 Define x86_segment_flags_t in libvmi.h (#977) * Define x86_segment_flags_t in libvmi.h * Add tr and ldt to common x86 registers * Copy tr and ldt on Xen into common x86 regs * Copy segment flags plus tr/ldt on kvm into common x86 regs 03 June 2021, 16:42:42 UTC
626fdf8 fix for issue #912 and fix for partial reads (#976) Co-authored-by: Hans P. Reiser <hr@sec.uni-passau.de> 03 June 2021, 16:41:23 UTC
3f5b0d5 Wire up cpuid events on kvmi (#975) * Add vmi-cpuid example tool * Wire up kvmi cpuid event * Fix astyle 20 April 2021, 12:40:00 UTC
8cdef96 Clear up event example even more (#974) * Clear up event example even more * f 20 April 2021, 01:13:15 UTC
548da8d Simplify event-example (#973) 19 April 2021, 21:56:00 UTC
cffe055 Clean up on partial init failure (#972) 06 April 2021, 00:18:22 UTC
fb2e006 Add snapcraft.yaml (#961) 14 February 2021, 19:17:21 UTC
582fc95 Add vmtrace (IPT) buffer offset to vm_event ABI (#960) 05 February 2021, 20:12:23 UTC
8b88b72 Turn on all debug options for scan-build test (#959) 30 January 2021, 15:21:41 UTC
719d90f Debug print in volatility_ist can segfault, fix (#958) 30 January 2021, 14:09:44 UTC
19379a9 Remove temp file accidentaly added to git (#957) 16 January 2021, 02:45:27 UTC
back to top