Re: DynamoRIO based tools

[Qin Zhao]

I am interested in DynamoRIO to do dynamic analysis. Is this framework encouraged to get partial call graphs (with data) from two different versions of a tool and see what exactly changed?

Sure, you can create call graph.
 

Also, since this is a "framework" , I was looking for tools that are built on top of DynamoRIO and could not find any. Am I missing something?

Dr.Memory (www.drmemory.org) is one tool. The rest I know are more like research purposed prototypes.
 

Thanks

Koushik

--
You received this message because you are subscribed to the Google Groups "DynamoRIO Users" group.
To view this discussion on the web visit https://groups.google.com/d/msg/dynamorio-users/-/Be_DveLb1AIJ.
To post to this group, send email to dynamor...@googlegroups.com.
To unsubscribe from this group, send email to dynamorio-use...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/dynamorio-users?hl=en.

--
Interested in Yoga? Be careful of The Yoga Cult or The Scary Yoga Obsession.

More information from  Lorie Anderson and Rick Ross.

[Derek Bruening]

On Wed, Sep 12, 2012 at 9:05 PM, Koushik <k.ko...@gmail.com> wrote:

Also, since this is a "framework" , I was looking for tools that are built on top of DynamoRIO and could not find any. Am I missing something?

There are ~10 or so tools described in the publications on the DynamoRIO site (http://dynamorio.org/pubs.html).

- Derek

[Koushik]

Thanks Qin and Derek for prompt reply.

I find these projects very interesting. Is there a way I can access the EDDI tool (How to Do a Million Watchpoints: Efficient Debugging Using Dynamic Instrumentation. http://www.dynamorio.org/pubs/zhao-million-watchpoints-CC08.pdf)? I am not sure if this is an open source tool. 

Thanks

Koushik

On Wednesday, September 12, 2012 6:05:08 PM UTC-7, Koushik wrote:

Hi,

I am interested in DynamoRIO to do dynamic analysis. Is this framework encouraged to get partial call graphs (with data) from two different versions of a tool and see what exactly changed?

Also, since this is a "framework" , I was looking for tools that are built on top of DynamoRIO and could not find any. Am I missing something?

Thanks

Koushik

[Qin Zhao]

I wrote that paper and the code.
It used the shadow memory to store watchpoint and to inspect every memory reference. The code was for 32-bit and I am not sure if I can find it.
If you just for research purpose, I would suggest you to try Umbra that I put on github.
If for other purpose and need high quality code, I would suggest you try Dr.Memory.
Both have shadow memory framework in, Umbra for 64-bit Linux, Dr.Memory for 32-bit Linux and Windows.

Qin

--

You received this message because you are subscribed to the Google Groups "DynamoRIO Users" group.

To view this discussion on the web visit https://groups.google.com/d/msg/dynamorio-users/-/SG-68DcWMLsJ.

To post to this group, send email to dynamor...@googlegroups.com.
To unsubscribe from this group, send email to dynamorio-use...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/dynamorio-users?hl=en.

[Koushik K]

Thanks for the prompt reply Qin. I will try out Dr.Memory

[Koushik K]

Qin,

I really like this idea from your paper

"We also used EDDI to perform a kind of dynamic pointer analysis. In particular, using 181.mcf as an example, we watched all 33,112 instances of

the node data type and identified the 468 static instructions that referenced

these node objects 1.08 × 10

10

times during execution."  (http://dynamorio.org/pubs/zhao-million-watchpoints-CC08.pdf)

Is there a way to use Dr.Memory and do this kind of debugging by specifying which class/object to monitor?

Thanks

Koushik

[Qin Zhao]

Dr.Memory does much more than that is industry quality code, i.e. robust but complicated.
We are trying to extract some parts and make it more modularized for easy of using each part.
You are welcome to contribute.

The study you mentioned in the paper is actually use the shadow memory framework.
If you want to do research prototype, I would suggest you try to use Umbra instead, https://github.com/zhaoqin/Umbra.
It should be easier to wrote similar tool on top of Umbra.

Qin