search

geohot / qira

QEMU Interactive Runtime Analyser
MIT License
3.95k stars 469 forks source link

[qira_program] fix strace parsing #252

Closed korniltsev closed 3 years ago

korniltsev commented 3 years ago

glibc now uses openat for shared libs

cat /tmp/qira_logs/1_strace | grep -E "(open|mmap)"
...
0 36783 openat(-100,"/lib/x86_64-linux-gnu/libc.so.6",O_RDONLY|O_CLOEXEC) = 30
0 36783 mmap(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x7f0211181000
0 36783 mmap(NULL,1852680,PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,30,0) = 0x7f0211183000
...

This PR fixes base_memory for shared libs