temu taint_file problem

[Sanjay Rawat]

Hi,
Before throwing this mail for any help, I did search this mailing list, but I could not get the solution.
So, i am facing the following problem:
I installed temu/qemu on Ubuntu (host) and installed a windows xp guest in it. then I gave the
1. load_plugin tracecap/tracecap.so
2. enable_emulation
3. load_config tracecap/main.ini (with first_taint_data enabled)
4. trace 424 "/home/sanjay/music.trace"  [424 is the process ID for "music" app]
5. taint_file "song.mp3" 1 10
At this command: i got the following msg:
Tainting disk 1 file song.mp3
Could not find disk_info

Now, after stopping the trace, i get the following info:
 
(qemu) trace_stop
Stop tracing process 424
Number of instructions decoded: 76691454
Number of operands decoded: 188942362
Number of instructions written to trace: 0
Number of tainted instructions written to trace: 0
Processing time: 1197.69 U: 1071.89 S: 125.8
Generating file: /home/sanjay/music.trace.functions

which means that my trace file is empty. What has gone wrong? I suspect the ,sg "Could not find disk_info" to be the cause. any help/suggestion?

--
Regards
-Sanjay

[Aravind Prakash]

Try giving the full file path as taint file argument. For eg: "/home/sanjay/song.mp3"

Also, disable_emulation before trace_stop might help.

Aravind

[Alex Bazhanyuk]

you can use:
taint_nic
send file from network
use nc for receive file.

Or you can read:

http://groups.google.com/group/bitblaze-users/browse_thread/thread/1a8b40cb46444e5e/a2e1c40c1cc852d4?lnk=gst&q=virvdova+taint_file#a2e1c40c1cc852d4

Thanks,
Alex

[Sanjay Rawat]

Hi Aravind,
Thanks for responding.
I tried both of your options, but could not get any success. Let me explain what I did.
I am running windows XP as guest on Ubuntu host. So, as far as file path is concerned, i did it in 2 ways:
1. gave the windows path as "C:\\home\\song.mp" and it did not work.
2. moun t the windows image in /media/win and then i gave the path as "/media/win/homesaong.pm3" and again it dod not work.
I tried disable_emulation option with no success. I am getting trace.function file but no trace file. It says 'zero instruction written" :(

any suggestions?

regards
-Sanjay

--
Regards
-Sanjay
** Security Feature != Secure Feature **
                                                     --MH