First of all, I checked the main.ini file and it was
"tracing_tainted_only = no"
Program I traced is:
---------------------------------------
#include <stdio.h>
int main(int argc, char **argv)
{
int x;
scanf("%d", &x);
if (x != 5)
printf("Hello\n");
return 0;
}
--------------------------------------------------
Following is the input I gave to the qemu terminal
--------------------------------------------------
(qemu) trace 4595 foo.trace
PID: 4595 CR3: 0x07bc7000
(qemu) taint_sendkey a 1001
(qemu) Tainting keystroke: 9 00000001
taint_sendkey a 1002
(qemu) Tainting keystroke: 9 00000001
taint_sendkey a 1003
(qemu) Tainting keystroke: 9 00000001
taint_sendkey a 1004
(qemu) Tainting keystroke: 9 00000001
taint_sendkey a 1005
(qemu) Tainting keystroke: 9 00000001
taint_sendkey a 1006
(qemu) Tainting keystroke: 9 00000001
taint_sendkey a 1007
(qemu) Tainting keystroke: 9 00000001
taint_sendkey ret 1008
(qemu) Tainting keystroke: 9 00000001
trace_stop
Stop tracing process 4595
Number of instructions decoded: 0
Number of operands decoded: 0
Number of instructions written to trace: 0
Number of tainted instructions written to trace: 0
Processing time: 6.22039 U: 1.76411 S: 4.45628
Generating file: foo.trace.functions
(qemu)
--------------------------------------------------------