FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Can't use user mode trace when installed Spectre&Meltdown patch. · Issue #6 · intelpt/WindowsIntelPT · GitHub

Can't use user mode trace when installed Spectre&Meltdown patch. #6

Description

Hi guys,

My Windows10 installed the newest patch this week ,it's used for patch Intel CPU--Spectre&Meltdown vulnerabilities. But today when I test WindowsIntelPt project on this machine, I find it is something wrong in user mode trace. And everything is Okay before I installed the newest windows patch...
Log like this:

`Talos Intel PT Test Application
Version 0.5

Intel Processor Tracing support for this CPU: YES
Would you like to do the Kernel Tests? [Y/N] n
Insert here the target process to trace: 872
872
On how many processors would you like to run the process? [1/4] 1
Creating trace files (binary and readable)... Success!
Creating target process... OK

Using IP filtering mode!
New Process main module base address: 0x7FF7F1640000, size 0x00041000.

Starting the Tracing and resuming the process...
Error!

*** PT Trace results ***
Number of traced CPUs: 1 - Affinity mask: 0x00000001.
CPU 0
Error!

Global number of PT packets acquired: 0.
All the dumps have been saved in "D:\mirror\transfer\Compiled_IntelPt\1746-01082018_Dumps".
Press any key to exit...`

I guess the problem is the newest windows used different CR3 between user mode and kernel mode.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions


      Back | FazBrowse Home | New Git URL