Closed cotic closed 2 years ago
Hi @cotic thank you for this bug report, there is indeed a mismatch between the 2 versions.
I created a PR to fix it.
The VMI_EVENTS_VERSION has been upgraded from 0x7 to 0x8 since the nested page table walk support. I fixed the python bindings to support this feature as well in this commit: https://github.com/libvmi/python/commit/82dfaa9c89ed6701ce6b02a0fda3028e03049810
What I don't understand at this point is why the CI didn't catch it and was green, despite having a library import smoke test https://github.com/libvmi/python/actions/runs/1186795342
VMI_EVENTS_VERSION is 8 in :
https://github.com/libvmi/libvmi/blob/master/libvmi/events.h#L36
and is 7 in the current python bindings:
https://github.com/libvmi/python/blob/master/libvmi/events_cdef.h#L1
This causes an error:
I assume this is a check, as the DS may have changed, and the fix, for now, is to use with an older version of LibVMI that is set to 7?