On 03/08/2017 11:16 AM, Julian Kirsch wrote:
For instance, many modern x86-64 operating systems maintain access to internal data structures via the MSR_GSBASE/MSR_KERNELGSBASE MSRs. Giving introspection utilities (such as a remotely attached gdb) a way of accessing these registers improves analysis results drastically.
If this is just for gdb, then we should provide access via the normal gdbstub, plus appropriate xml files. There are plenty of examples of this for other cpus.
r~
