>> I try to use cpu_memory_rw_debug() to read from 0x8xxxxxxx kernel virtual >> address, when the guest is in user mode. Obviously, it fails. >> Is it possible to modify some control registers to allow such an access? I >> tried to set/clear the kernel mode bits in CP0_Status, but it doesn't help. > > Rather than messing with the current state of the CPU, you > probably want to use the helper functions for doing load/store > to guest memory with a particular MMU index.
Could you please elaborate a bit more, what helper functions I should use? I need to be able to read from the guest's kernel space, despite the current ring. (FWIW, I was able to do this using cpu_memory_rw_debug() on x86 and ARM.) Thanks.