在英特爾引腳使用IARG_MEMORYWRITE_SIZE和IARG_MEMORYREAD_SIZE參數引腳

Question

我正在嘗試使用英特爾引腳來調查可執行文件的內存活動。我想修改Pin工具包中的pinatrace示例。我嘗試使用IARG_MEMORYWRITE_SIZE/IARG_MEMORYREAD_SIZE參數。這是源代碼。

#include <stdio.h> 
#include <chrono> 
#include "pin.H" 
#include <string> 
using std::chrono::nanoseconds; 

FILE * trace; 
auto start=std::chrono::high_resolution_clock::now(); 

std::string buffer; 
// Print a memory read record 
VOID RecordMemRead(VOID * ip, VOID * addr,VOID * size) 
{ 
    auto elapsed = (std::chrono::high_resolution_clock::now()) - start; 
    nanoseconds ns= std::chrono::duration_cast<std::chrono::nanoseconds>(elapsed); 

//sprintf(buffer,trace,"%p: R %p Time,ns %lld \n", ip, addr,ns); 

    //std::string fout = fout + std::to_string("%p: R %p Time,ns %lld \n", ip, addr,ns); 

    fprintf(trace,"%p: R,bytes %p Size,bytes %lld \n", ip, addr,size); 
} 

// Print a memory write record 
VOID RecordMemWrite(VOID * ip, VOID * addr, VOID * size) 
{ 
    auto elapsed = (std::chrono::high_resolution_clock::now()) - start; 
    nanoseconds ns= std::chrono::duration_cast<std::chrono::nanoseconds>(elapsed); 

    fprintf(trace,"%p: W,bytes %p Size,bytes %lld \n", ip, addr,size); 
} 

// Is called for every instruction and instruments reads and writes 
VOID Instruction(INS ins, VOID *v) 
{ 
    // Instruments memory accesses using a predicated call, i.e. 
    // the instrumentation is called iff the instruction will actually be executed. 
    // 
    // On the IA-32 and Intel(R) 64 architectures conditional moves and REP 
    // prefixed instructions appear as predicated instructions in Pin. 
    UINT32 memOperands = INS_MemoryOperandCount(ins); 

    // Iterate over each memory operand of the instruction. 
    for (UINT32 memOp = 0; memOp < memOperands; memOp++) 
    { 
     if (INS_MemoryOperandIsRead(ins, memOp)) 
     { 
      INS_InsertCall(
      //INS_InsertIfCall(
      ins, IPOINT_BEFORE, (AFUNPTR)RecordMemRead, 
       IARG_INST_PTR, 
       IARG_MEMORYOP_EA, 
       IARG_MEMORYREAD_SIZE, memOp, 
       IARG_END); 
     } 
     // Note that in some architectures a single memory operand can be 
     // both read and written (for instance incl (%eax) on IA-32) 
     // In that case we instrument it once for read and once for write. 
     //IARG_MEMORYREAD_SIZE Type: UINT32. Size in bytes of memory read. 
     //IARG_MEMORYOP_EA 
     //IARG_MEMORYWRITE_SIZE  Type: UINT32. Size in bytes of memory write. 
     if (INS_MemoryOperandIsWritten(ins, memOp)) 
     { 
      INS_InsertCall(
      //INS_InsertPredicatedCall(
       ins, IPOINT_BEFORE, (AFUNPTR)RecordMemWrite, 
       IARG_INST_PTR, 
       IARG_MEMORYOP_EA, 
       IARG_MEMORYWRITE_SIZE, memOp, 
       IARG_END); 
     } 
    } 
} 

VOID Fini(INT32 code, VOID *v) 
{ 
    fprintf(trace, "#eof\n"); 
    fclose(trace); 
} 

/* ===================================================================== */ 
/* Print Help Message             */ 
/* ===================================================================== */ 

INT32 Usage() 
{ 
    PIN_ERROR("This Pintool prints a trace of memory addresses\n" 
       + KNOB_BASE::StringKnobSummary() + "\n"); 
    return -1; 
} 

/* ===================================================================== */ 
/* Main                 */ 
/* ===================================================================== */ 


int main(int argc, char *argv[]) 
{ 
    if (PIN_Init(argc, argv)) return Usage(); 

    trace = fopen("pinatrace2.out", "w"); 

    start = std::chrono::high_resolution_clock::now(); 

    INS_AddInstrumentFunction(Instruction, 0); 
    PIN_AddFiniFunction(Fini, 0); 

    // Never returns 
    PIN_StartProgram(); 

    return 0; 
} 

編譯後，我試圖運行它，但收到此錯誤。如果我刪除這個參數並編輯RecordMemWrite/RecordMemRead函數 - 一切正常。

>..\..\..\..\ia32\bin\pin.exe -t MyPinTool -- cmd /C dir 
A: Source\pin\vm\iarglist.cpp: LEVEL_VM::IARGLIST_CLASS::AddArgumentsAndParams: 330: IARG_INVALID seen 
NO STACK TRACE AVAILABLE 
Detach Service Count: 1 
Pin 2.14 
Copyright (c) 2003-2015, Intel Corporation. All rights reserved. 
@CHARM-VERSION: $Rev: 71293 $ 
@CHARM-BUILDER: BUILDER 
@CHARM-COMPILER: MS-cl 1700 
@CHARM-TARGET: ia32 
@CHARM-CFLAGS: __OPTIMIZE__=__OPTIMIZE__ __NO_INLINE__=__NO_INLINE__ 

有沒有人知道我做錯了什麼？

Answer 1

您與IARG_操作數發生了錯誤。

• IARG_MEMORYOP_EA需要一個額外的參數
• IARG_MEMORYREAD_SIZE和IARG_MEMORYWRITE_SIZE做不需要一個額外的參數

從英特爾PIN documentation：

IARG_MEMORYOP_EA類型：ADDRINT。內存操作的有效地址 （內存操作索引是next arg）;僅在IPOINT_BEFORE有效

對於上述IARG，明確指出「memory op index」是下一個參數。

IARG_MEMORYREAD_SIZE類型：UINT32。大小以字節爲單位的內存讀取 IARG_MEMORYWRITE_SIZE類型：UINT32。內存寫入的字節大小。

在ARG_MEMORYxxx_SIZE（它只是表示您在回調中接收到的內容）之後，文檔沒有說明需要什麼。

固定碼（換另一呼叫相同）：

 INS_InsertCall(
     //INS_InsertIfCall(
     ins, IPOINT_BEFORE, (AFUNPTR)RecordMemRead, 
      IARG_INST_PTR, 
      IARG_MEMORYOP_EA, memop, // memory op index required 
      IARG_MEMORYREAD_SIZE, // no arg 
      IARG_END);