Hello,
Thanks for your time, I have a question about Decaf disk tainting.
If I understand it correctly, the codes act as:
when Qemu does dma write, Decaf will check the disk taint (if any); and when Qemu does dma read, Decaf taints the disk file via taintcheck_chk_hdwrite().
However, shouldn't it be the reversed logic? That is, when Qemu does a write, Decaf will taint the target disk file during which; when Qemu does a read, Decaf will check if the file being read is tainted or not?
Or I misunderstand the behavior of Decaf disk tainting?
Thanks,
Michael Chen