----- 7 lip 2020 o 21:39, Michał Leszczyński michal.leszczyn...@cert.pl napisał(a):
> Intel Processor Trace is an architectural extension available in modern Intel > family CPUs. It allows recording the detailed trace of activity while the > processor executes the code. One might use the recorded trace to reconstruct > the code flow. It means, to find out the executed code paths, determine > branches taken, and so forth. > > The abovementioned feature is described in Intel(R) 64 and IA-32 Architectures > Software Developer's Manual Volume 3C: System Programming Guide, Part 3, > Chapter 36: "Intel Processor Trace." > > This patch series implements an interface that Dom0 could use in order to > enable IPT for particular vCPUs in DomU, allowing for external monitoring. > Such > a feature has numerous applications like malware monitoring, fuzzing, or > performance testing. > > Also thanks to Tamas K Lengyel for a few preliminary hints before > first version of this patch was submitted to xen-devel. > > Changed since v1: > * MSR_RTIT_CTL is managed using MSR load lists > * other PT-related MSRs are modified only when vCPU goes out of context > * trace buffer is now acquired as a resource > * added vmtrace_pt_size parameter in xl.cfg, the size of trace buffer > must be specified in the moment of domain creation > * trace buffers are allocated on domain creation, destructed on > domain destruction > * HVMOP_vmtrace_ipt_enable/disable is limited to enabling/disabling PT > these calls don't manage buffer memory anymore > * lifted 32 MFN/GFN array limit when acquiring resources > * minor code style changes according to review > > Changed since v2: > * trace buffer is now allocated on domain creation (in v2 it was > allocated when hvm param was set) > * restored 32-item limit in mfn/gfn arrays in acquire_resource > and instead implemented hypercall continuations > * code changes according to Jan's and Roger's review > > Changed since v3: > * vmtrace HVMOPs are not implemented as DOMCTLs > * patches splitted up according to Andrew's comments > * code changes according to v3 review on the mailing list > > Changed since v4: > * rebased to commit be63d9d4 > * fixed dependencies between patches > (earlier patches don't reference further patches) > * introduced preemption check in acquire_resource > * moved buffer allocation to common code > * splitted some patches according to code review > * minor fixes according to code review > > Changed since v5: > * trace buffer size is now dynamically determined by the proctrace > tool > * trace buffer size variable is uniformly defined as uint32_t > processor_trace_buf_kb in hypervisor, toolstack and ABI > * buffer pages are not freed explicitly but reference count is > now used instead > * minor fixes according to code review > > This patch series is available on GitHub: > https://github.com/icedevml/xen/tree/ipt-patch-v6 > > > Michal Leszczynski (11): > memory: batch processing in acquire_resource() > x86/vmx: add Intel PT MSR definitions > x86/vmx: add IPT cpu feature > common: add vmtrace_pt_size domain parameter > tools/libxl: add vmtrace_pt_size parameter > x86/hvm: processor trace interface in HVM > x86/vmx: implement IPT in VMX > x86/mm: add vmtrace_buf resource type > x86/domctl: add XEN_DOMCTL_vmtrace_op > tools/libxc: add xc_vmtrace_* functions > tools/proctrace: add proctrace tool > > docs/man/xl.cfg.5.pod.in | 13 ++ > tools/golang/xenlight/helpers.gen.go | 2 + > tools/golang/xenlight/types.gen.go | 1 + > tools/libxc/Makefile | 1 + > tools/libxc/include/xenctrl.h | 40 +++++ > tools/libxc/xc_vmtrace.c | 87 ++++++++++ > tools/libxl/libxl.h | 8 + > tools/libxl/libxl_create.c | 1 + > tools/libxl/libxl_types.idl | 4 + > tools/proctrace/Makefile | 45 +++++ > tools/proctrace/proctrace.c | 179 ++++++++++++++++++++ > tools/xl/xl_parse.c | 22 +++ > xen/arch/x86/domain.c | 27 +++ > xen/arch/x86/domctl.c | 50 ++++++ > xen/arch/x86/hvm/vmx/vmcs.c | 15 +- > xen/arch/x86/hvm/vmx/vmx.c | 110 ++++++++++++ > xen/common/domain.c | 46 +++++ > xen/common/memory.c | 80 ++++++++- > xen/include/asm-x86/cpufeature.h | 1 + > xen/include/asm-x86/hvm/hvm.h | 20 +++ > xen/include/asm-x86/hvm/vmx/vmcs.h | 4 + > xen/include/asm-x86/hvm/vmx/vmx.h | 14 ++ > xen/include/asm-x86/msr-index.h | 24 +++ > xen/include/public/arch-x86/cpufeatureset.h | 1 + > xen/include/public/domctl.h | 29 ++++ > xen/include/public/memory.h | 1 + > xen/include/xen/domain.h | 2 + > xen/include/xen/sched.h | 7 + > 28 files changed, 828 insertions(+), 6 deletions(-) > create mode 100644 tools/libxc/xc_vmtrace.c > create mode 100644 tools/proctrace/Makefile > create mode 100644 tools/proctrace/proctrace.c > > -- > 2.17.1 Kind reminder about this new patch version for external IPT monitoring. Best regards, Michał Leszczyński CERT Polska
