Host resets on instruction trace

[Henrik Helmuth]

Hello,

I'm out of luck again.

After I got windows xp up'n'running (thanks for the hint) I tried some
basic instruction tracing.
./ether 1 instrtrace calc.exe
If the trace is started after calc.exe, everyting is running fine, but
If calc.exe is started afterwards the hosts crashes:
- ./ether 1 instrtrace calc.exe
- Output:
After init:
shared_page_ptr: 0xffff830000fd9000
shared_page_mfn: 0xfd9
domid_source: 0
event_channel_port: 28
Shared Page va: 0x7f2b15e2d000
Shared Page test:
Page-Sharing is A-OK!

Trying to bind to local port...
Success, bound to local port: 29
Trying to get first pending notification...
Taking off suprious pending notification...
Setting filter by name to: calc.exe

- calc.exe is launched, but no window appears

- output:
Execution of Target detected:
Image Base: 0x1000000

A few seconds later the host reboots without shutting down ... - same
with notepad.exe

What may be wrong this time?

Thanks in adance,
Regards, Henrik

[Josh Eads]

Hi Henrik,

Have you double checked that your guest settings are all correct?
Specifically, are you running SP2 and have disabled PAE both in the
Xen CFG file and inside the Windows XP guest with the boot.ini
settings as described here http://ether.gtisc.gatech.edu/source.html
? It looks like Ether is detecting execution and the image base
correctly, but perhaps is not able to map the memory correctly due to
PAE being enabled.

Good luck,
Josh

On Mar 25, 9:20 am, Henrik Helmuth <henrik.helm...@googlemail.com>
wrote:

[Henrik Helmuth]

Hello,

On 25 Mrz., 19:52, Josh Eads <eads.j...@gmail.com> wrote:
> Have you double checked that your guest settings are all correct?
> Specifically, are you running SP2 and have disabled PAE both in the
> Xen CFG file and inside the Windows XP guest with the boot.ini

thanks for your help, I noticed, that ACPI was accidentely turned on -
after disabling ACPI (and setting the windows xp computer type to
"Standard PC") I got a little bit further:

This time, ether prints:

Execution of Target detected:
Image Base: 0x1000000

Image Size: 0x14000
Entry Point: 0x100739d

And a few secs later, the host reboots.

My config is:
import os, re
arch = os.uname()[4]
if re.search('64', arch):
arch_libdir = 'lib64'
else:
arch_libdir = 'lib'
#----------------------------------------------------------------------------
# Kernel image file.
kernel = "/usr/lib/xen/boot/hvmloader"
# The domain build function. HVM domain uses 'hvm'.
builder='hvm'
# Initial memory allocation (in megabytes) for the new domain.
memory = 256
# A name for your domain. All domains must have different names.
name = "windows-001"
# enable/disable HVM guest ACPI, default=0 (disabled)
acpi=0
# enable/disable HVM guest APIC, default=0 (disabled)
apic=0
# Pae
pae=0
cpus = "1" # all vcpus run on CPU1
vif = [ 'type=ioemu, mac=aa:cc:b0:00:00:11, bridge=xenbr0' ]
#vif = [ 'ip=10.0.0.2' ]
disk = [ 'phy:/dev/1/winxp-001,ioemu:hda,w']
boot="cd"
vnc=1
sdl=0
vncviewer=0
ne2000=0

My boot.ini is:
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
Professional" /nopae /noexecute=alwaysoff /fastdetect

Regards,
Henrik

[Henrik Helmuth]

Hello,

> After I got windows xp up'n'running (thanks for the hint) I tried some
> basic instruction tracing.
> ./ether 1 instrtrace calc.exe
> If the trace is started after calc.exe, everyting is running fine, but
> If calc.exe is started afterwards the hosts crashes:

I noticed that theses resets occur, if I start ether with a wrong DomU-
ID, too.
May this be an ether <-> xen communication issue?

Thanks in advance,
Regards Henrik.

[Artem Dinaburg]

Using the wrong DomU ID will make it crash pretty hard. Its a known issue. I originally tried to have the hypervisor code check whether the domU is valid, but wasn't able to find a working solution. I think adding the check in usermode might be a good option to prevent such accidents.

Artem

Regards Henrik.

To unsubscribe from this group, send email to ether-devel+unsubscribegooglegroups.com or reply to this email with the words "REMOVE ME" as the subject.

[Billy]

Henrik, were you ever able to resolve your issue??? After many trials
with a different machine I finally got Ether up and running on older
hardware. unpacking and systracing work flawlessly but instruction
tracing gives me the same output you received. It detects the process
i'd like to trace outputs the ImageBase/ImageSize/EntryPoint and then
a few seconds later my entire machine reboots.

I've extra checked PAE is off in the xen config and windows in the
boot.ini (and windows has been restarted since boot.ini changes). DEP
is also disabled in boot.ini.

Anyone have other suggestions???

thanks,
billy