search

DynamoRIO / drmemory

Memory Debugger for Windows, Linux, Mac, and Android
Other
2.44k stars 262 forks source link

DrTracker: dynamic information flow tracking library #825

Open derekbruening opened 9 years ago

derekbruening commented 9 years ago

From bruen...@google.com on March 09, 2012 09:46:43

xref issue #822 , issue #823 , issue #824 two more Extensions from the original discussion were DrMap for shadow mapping and DrTracker for shadow propagation, or perhaps combining them as DrShadow, or perhaps calling them Umbra (2.0) as we would incorporate Umbra and EMS64 features.

Original issue: http://code.google.com/p/drmemory/issues/detail?id=825

derekbruening commented 9 years ago

From zhao...@google.com on April 30, 2013 08:10:37

it seems that newer kernels load pie binaries at 0x555555550000, which may limit Umbra's mapping scheme.

Owner: zhao...@google.com
Labels: -Priority-Low Priority-Medium

derekbruening commented 9 years ago

From bruen...@google.com on October 17, 2013 12:44:46

Blockedon: drmemory:1350

derekbruening commented 7 years ago

The mapping part, called Umbra, is complete and never used an issue number in its commits, so let's make this issue solely about the "taint tracking" or "dynamic information flow tracking" extension.

GiuseppeDiGuglielmo commented 6 years ago

Is there any documentation describing the Umbra / DrTracker features for dynamic information flow tracking?

toshipiazza commented 6 years ago

@GiuseppeDiGuglielmo Umbra proper has been complete for a while, and can be used on both ARM and on x86. The docs for it are here. I am currently working on research which implements some of what we'd like from DrTracker, though it currently only supports a subset of ARM and has not yet been contributed upstream. If it helps, my research code is all here.

GiuseppeDiGuglielmo commented 6 years ago

@toshipiazza, I would like to try first Umbra and then DrTaint. Is there a running example for Umbra? I could not get too much from the guidelines.

toshipiazza commented 6 years ago

@GiuseppeDiGuglielmo Although the tests might be in some serious need of refactoring, they're a great way to get familiar with its usage. Here's one of the Umbra tests.