On 8/21/21 11:45 AM, Florian Hauschild wrote:
Hi all,

I extended the plugin interface with additional functionalities.
I wrote the extensions for fault injection/exploration reasearch using
QEMU. The additional functionalities for a plugin are:
   * Read and write guest memory
   * Read and write guest registers
   * Allow plugin to force QEMU into single step mode
   * Flush TB cache from plugin

If something is added to read a register from a plugin, then execlog plugin could print the operands value of each instruction. This would definitely be helpful for side-channel analysis: the Hamming weight (sum of bits) of the last operand roughly models the power consumption side-channel leakage.

If I recall correctly, there are some concerns about allowing to access registers inside plugins. Past threads about reading/writing registers:
https://lists.gnu.org/archive/html/qemu-devel/2020-03/msg08741.html
https://lists.gnu.org/archive/html/qemu-devel/2021-04/msg04588.html

Thanks,
-- Alexandre

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

Reply via email to