[panda-users] replay records with PANDROID

[gilles B]

Hello guys,

Hope you are doing well.
I've been playing with PANDA on x86 using different plugins over the last
months and I quite like it )
I would like now to go further and to use it with Android on ARM. I am now
able to create some records of my Android OS running in QEMU, unfortunately
I cannot replay any of my Android records with PANDA.
In order to see if this came from my records, I have tried to replay a
record from rrsahre.org, I have done exactly the same steps as for this
example:
https://github.com/moyix/panda/blob/master/docs/LINE_Censorship.md
When I replay the record of "line2" I have some issues: see logs enclosed.
Surprisingly if I run twice the same replay command consecutively, I have
either the error of log_replay.txt or the one of log_replay2.txt, but it is
the first one most of the time...
Did anybody ever have this problem ?

I have also been able to create my own Android records based on
https://github.com/moyix/panda/blob/master/docs/Android.md
Unfortunately I end up with the same errors.

Regards,

Gilles
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/panda-users/attachments/20160711/47f0d305/attachment.html
-------------- next part --------------
root at pandavm:/home/panda/Desktop/line_android_test# /home/panda/panda/qemu/arm-softmmu/qemu-system-arm -m 2048 -replay line2 -M android_arm -cpu cortex-a9 -kernel /dev/null -vnc :0 -global goldfish_mmc.sd_path=/dev/null -global goldfish_nand.system_path=/home/panda/Desktop/line_android_test/dummy.qcow2 -global goldfish_nand.user_data_path=/home/panda/Desktop/line_android_test/dummy.qcow2
goldfish_add_device: goldfish_device_bus, base ff001000 1000, irq 1 1
goldfish_device_bus: ff001000	 30
goldfish_add_device: goldfish_int, base ff000000 1000, irq 0 0
goldfish_int: ff000000	 38
goldfish_add_device: goldfish_timer, base ff003000 1000, irq 3 1
goldfish_timer: ff003000	 40
goldfish_add_device: goldfish_rtc, base ff010000 1000, irq 10 1
goldfish_rtc: ff010000	 48
goldfish_add_device: goldfish_tty, base ff002000 1000, irq 4 1
goldfish_tty: ff002000	 50
android_arm_init serial 1 0
android_arm_init serial 2 0
android_arm_init serial 3 0
goldfish_add_device: smc91x, base ff011000 1000, irq 11 1
goldfish_add_device: goldfish_fb, base ff012000 1000, irq 12 1
goldfish_fb: ff012000	 68
goldfish_add_device: goldfish_mmc, base ff005000 1000, irq 13 1
goldfish_mmc: ff005000	 70
goldfish_add_device: goldfish_memlog, base ff006000 1000, irq 0 0
goldfish_memlog: ff006000	 78
goldfish_add_device: goldfish-battery, base ff013000 1000, irq 14 1
goldfish-battery: ff013000	 80
goldfish_add_device: goldfish_events, base ff014000 1000, irq 15 1
goldfish_events: ff014000	 88
Using event IRQ
Invalid system partition size for non-QCOW image: 0emulator: geometry says there are 2048 blocks

emulator: rounding devsize up to a full eraseunit, now e7000

emulator: Dev size of /home/panda/Desktop/line_android_test/dummy.qcow2 is e7000

WARNING: Data partition already in use. Changes will not persist!
Invalid data partition size for non-QCOW image: 0emulator: Dev size 0x0 came from argument

emulator: geometry says there are 0 blocks

emulator: Dev size of /tmp/android-root/emulator-C3u5CJ is 0

emulator: Dev size 0x0 came from argument

emulator: geometry says there are 0 blocks

emulator: Dev size of /tmp/android-root/emulator-ATHFfh is 0

goldfish_add_device: goldfish_nand, base ff015000 1000, irq 16 1
goldfish_nand: ff015000	 90
goldfish_add_device: qemu_pipe, base ff016000 2000, irq 17 1
qemu_pipe: ff016000	 98
emulator: control console listening on port 5554, ADB on port 5555
emulator: can't connect to ADB server: Connection refused
emulator: Realistic sensor emulation is not available, since the remote controller is not accessible:
 Connection refused
loading snapshot
qemu: warning: error while loading state for instance 0x0 of device 'qemud'
qemu-system-arm: Error -5 while loading VM state
... done.
opening nondet log for read :	./line2-rr-nondet.log
Infinite loop detected during replay, aborting.
{guest_instr_count=1 pc=0x00000000, secondary=0x00000000}
line2:           1 (  0.00%) instrs.    1.68 sec.  2.05 GB ram.
total_instr in replay: 10367712943
ERROR: replay failed!
Time taken was: 0 seconds.
Stats:
RR_INPUT_1 number = 0, size = 0 bytes
RR_INPUT_2 number = 0, size = 0 bytes
RR_INPUT_4 number = 0, size = 0 bytes
RR_INPUT_8 number = 0, size = 0 bytes
RR_INTERRUPT_REQUEST number = 3, size = 84 bytes
RR_EXIT_REQUEST number = 0, size = 0 bytes
RR_SKIPPED_CALL number = 0, size = 0 bytes
RR_DEBUG number = 0, size = 0 bytes
max_queue_len = 1
0 items on recycle list, 0 bytes total
ERROR: replay failed!
Aborted

root at pandavm:/home/panda/Desktop/line_android_test# ls
dummy2.qcow2	   dummy.qcow2.lock	line2-rr-snp	 log_replay.txt~
dummy2.qcow2.lock  line2.rr		log_replay2.txt
dummy.qcow2	   line2-rr-nondet.log	log_replay.txt
root at pandavm:/home/panda/Desktop/line_android_test# 
-------------- next part --------------
root at pandavm:/home/panda/Desktop/line_android_test# /home/panda/panda/qemu/arm-softmmu/qemu-system-arm -m 2048 -replay line2 -M android_arm -cpu cortex-a9 -kernel /dev/null -global goldfish_mmc.sd_path=/dev/null -global goldfish_nand.system_path=/home/panda/Desktop/line_android_test/dummy2.qcow2 -global goldfish_nand.user_data_path=/home/panda/Desktop/line_android_test/dummy.qcow2
goldfish_add_device: goldfish_device_bus, base ff001000 1000, irq 1 1
goldfish_device_bus: ff001000	 30
goldfish_add_device: goldfish_int, base ff000000 1000, irq 0 0
goldfish_int: ff000000	 38
goldfish_add_device: goldfish_timer, base ff003000 1000, irq 3 1
goldfish_timer: ff003000	 40
goldfish_add_device: goldfish_rtc, base ff010000 1000, irq 10 1
goldfish_rtc: ff010000	 48
goldfish_add_device: goldfish_tty, base ff002000 1000, irq 4 1
goldfish_tty: ff002000	 50
android_arm_init serial 1 0
android_arm_init serial 2 0
android_arm_init serial 3 0
goldfish_add_device: smc91x, base ff011000 1000, irq 11 1
goldfish_add_device: goldfish_fb, base ff012000 1000, irq 12 1
goldfish_fb: ff012000	 68
goldfish_add_device: goldfish_mmc, base ff005000 1000, irq 13 1
goldfish_mmc: ff005000	 70
goldfish_add_device: goldfish_memlog, base ff006000 1000, irq 0 0
goldfish_memlog: ff006000	 78
goldfish_add_device: goldfish-battery, base ff013000 1000, irq 14 1
goldfish-battery: ff013000	 80
goldfish_add_device: goldfish_events, base ff014000 1000, irq 15 1
goldfish_events: ff014000	 88
Using event IRQ
Invalid system partition size for non-QCOW image: 0emulator: geometry says there are 2048 blocks

emulator: rounding devsize up to a full eraseunit, now e7000

emulator: Dev size of /home/panda/Desktop/line_android_test/dummy2.qcow2 is e7000

Invalid data partition size for non-QCOW image: 0emulator: Dev size 0x0 came from argument

emulator: geometry says there are 2048 blocks

emulator: rounding devsize up to a full eraseunit, now e7000

emulator: Dev size of /home/panda/Desktop/line_android_test/dummy.qcow2 is e7000

emulator: Dev size 0x0 came from argument

NAND: could not create temp file for cache NAND disk image: File exists
root at pandavm:/home/panda/Desktop/line_android_test#