Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
.gitlab-ci.d		.gitlab-ci.d
.gitlab/issue_templates		.gitlab/issue_templates
accel		accel
audio		audio
authz		authz
backends		backends
block		block
bsd-user		bsd-user
chardev		chardev
common-user		common-user
configs		configs
contrib		contrib
crypto		crypto
disas		disas
docs		docs
dump		dump
ebpf		ebpf
fpu		fpu
fsdev		fsdev
gdb-xml		gdb-xml
gdbstub		gdbstub
host/include		host/include
hw		hw
include		include
io		io
kreit		kreit
libdecnumber		libdecnumber
linux-headers		linux-headers
linux-user		linux-user
migration		migration
monitor		monitor
nbd		nbd
net		net
pc-bios		pc-bios
plugins		plugins
po		po
python		python
qapi		qapi
qga		qga
qobject		qobject
qom		qom
replay		replay
roms		roms
scripts		scripts
scsi		scsi
semihosting		semihosting
softmmu		softmmu
stats		stats
storage-daemon		storage-daemon
stubs		stubs
subprojects		subprojects
target		target
tcg		tcg
tests		tests
tools		tools
trace		trace
ui		ui
util		util
.dir-locals.el		.dir-locals.el
.editorconfig		.editorconfig
.exrc		.exrc
.gdbinit		.gdbinit
.git-blame-ignore-revs		.git-blame-ignore-revs
.gitattributes		.gitattributes
.gitignore		.gitignore
.gitlab-ci.yml		.gitlab-ci.yml
.gitmodules		.gitmodules
.gitpublish		.gitpublish
.mailmap		.mailmap
.patchew.yml		.patchew.yml
.readthedocs.yml		.readthedocs.yml
.travis.yml		.travis.yml
COPYING		COPYING
COPYING.LIB		COPYING.LIB
Kconfig		Kconfig
Kconfig.host		Kconfig.host
LICENSE		LICENSE
MAINTAINERS		MAINTAINERS
Makefile		Makefile
README.md		README.md
README.rst		README.rst
VERSION		VERSION
block.c		block.c
blockdev-nbd.c		blockdev-nbd.c
blockdev.c		blockdev.c
blockjob.c		blockjob.c
configure		configure
cpu.c		cpu.c
cpus-common.c		cpus-common.c
event-loop-base.c		event-loop-base.c
gitdm.config		gitdm.config
hmp-commands-info.hx		hmp-commands-info.hx
hmp-commands.hx		hmp-commands.hx
iothread.c		iothread.c
job-qmp.c		job-qmp.c
job.c		job.c
memory_ldst.c.inc		memory_ldst.c.inc
meson.build		meson.build
meson_options.txt		meson_options.txt

Repository files navigation

QEMU-KREIT README

This is a modified qemu based on v8.1.3, which is aimed to provided various instrumentation for binary-only kernel fuzzing, crash analysis and so on.

Some designs and code are inspired by QASAN.

Basic Function

Binary-only coverage collection
Binary-only address sanitizer for full-system mode
Full-system mode instruction trace
Full-system mode crash dump for crash analysis

Design Principle

Easy to migrate to other qemu version
Minimal configuration for various binary-only kernel programs
Flexible tracing configuration (e.g., instruction trace for a specified thread)

State

Now the project is still in demo state, for reproducing please refer to qnx-demo. Only qnx demo is valid now.

About

Modified qemu for binary-only kernel tracing, address sanitizer and so on

Readme

Activity

Custom properties

19 stars

1 watching

0 forks

Report repository

OS3Lab/qemu-kreit: Modified qemu for binary-only kernel tracing, address sanitizer and so on · GitHub

Repository files navigation

QEMU-KREIT README

Basic Function

Design Principle

State

About

Releases

Packages

Contributors

Languages

OS3Lab/qemu-kreit: Modified qemu for binary-only kernel tracing, address sanitizer and so on · GitHub

Latest commit

History

Folders and files

Repository files navigation

QEMU-KREIT README

Basic Function

Design Principle

State

About

Resources

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages