[panda-users] About tainted_instr plugin

王一帆 flowergot at 126.com
Wed Feb 7 09:19:14 EST 2018


Hi,
I'm trying to record tainted instructions on panda, that is tainted_instr plugin does.
I followed the doc in https://github.com/panda-re/panda/blob/master/panda/docs/tainted_instructions.md, but get the following error.
Then I tried another doc in https://github.com/panda-re/panda/blob/panda1/qemu/panda_plugins/tainted_instr/USAGE.md, also get an error.
Is there any solutions on successfully using tainted_instr plugin?
And I feel confused about the output in tainted_instr.plog in https://github.com/panda-re/panda/blob/master/panda/docs/tainted_instructions.md. Is it possible for panda to trace tainted instruction like following picture? The address of instructions are recorded left and operations are recorded right with tainted data labeled (in red) .


Thanks,
Evelyn Wang,
Tsinghua University,
Beijing, China



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/panda-users/attachments/20180207/4c636ea5/attachment-0001.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ?? 4.png
Type: image/png
Size: 388600 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/panda-users/attachments/20180207/4c636ea5/attachment-0003.png
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ?? 1.png
Type: image/png
Size: 726023 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/panda-users/attachments/20180207/4c636ea5/attachment-0004.png
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ?? 3.png
Type: image/png
Size: 1453173 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/panda-users/attachments/20180207/4c636ea5/attachment-0005.png


More information about the panda-users mailing list