Message ID | 20210821094527.491232-1-florian.hauschild@fs.ei.tum.de (mailing list archive) |
---|---|
Headers | show |
Series | QEMU TCG plugin interface extensions | expand |
On 8/21/21 11:45 AM, Florian Hauschild wrote: > Hi all, > > I extended the plugin interface with additional functionalities. > I wrote the extensions for fault injection/exploration reasearch using > QEMU. The additional functionalities for a plugin are: > * Read and write guest memory > * Read and write guest registers > * Allow plugin to force QEMU into single step mode > * Flush TB cache from plugin If something is added to read a register from a plugin, then execlog plugin could print the operands value of each instruction. This would definitely be helpful for side-channel analysis: the Hamming weight (sum of bits) of the last operand roughly models the power consumption side-channel leakage. If I recall correctly, there are some concerns about allowing to access registers inside plugins. Past threads about reading/writing registers: https://lists.gnu.org/archive/html/qemu-devel/2020-03/msg08741.html https://lists.gnu.org/archive/html/qemu-devel/2021-04/msg04588.html Thanks, -- Alexandre