vykt / ptrscan

Pointer chain scanner for Linux.
GNU General Public License v3.0
34 stars 2 forks source link

thread -> get_next_buffer_smart: memory read into buffer failed.thread #3

Closed MexikanoS closed 7 months ago

MexikanoS commented 7 months ago
$ sudo ptrscan -a 0x10a4d750 -w first_map.pscan client
thread -> get_next_buffer_smart: memory read into buffer failed.thread -> get_next_buffer_smart: failsafe memory read into buffer failed.

Got all privileges; process is able to be proceed. I waited for couple of minutes after this error occured but nothing happened, so seems like EOL without shutdown. Any description on the error would be nice.

vykt commented 7 months ago

I'll look into it shortly. In the meantime, try building with 'make scan_debug'. This should dump the internal tree as it is being built.

MexikanoS commented 7 months ago
  [DEBUG] --- (regions_to_scan)[28b]:  m_entry    : 0x0x779bc3200e18
  start_addr : 0x77d1f852f000
  end_addr   : 0x77d1f8530000

  [DEBUG] --- (regions_to_scan)[28c]:  m_entry    : 0x0x779bc3206430
  start_addr : 0x77d1f8548000
  end_addr   : 0x77d1f8549000

  [DEBUG] --- (regions_to_scan)[28d]:  m_entry    : 0x0x779bc3207568
  start_addr : 0x77d1f8549000
  end_addr   : 0x77d1f854b000

  [DEBUG] --- (regions_to_scan)[28e]:  m_entry    : 0x0x779bc320cb80
  start_addr : 0x77d1f8582000
  end_addr   : 0x77d1f8584000

  [DEBUG] --- (regions_to_scan)[28f]:  m_entry    : 0x0x779bc320dcb8
  start_addr : 0x7ffc4a009000
  end_addr   : 0x7ffc4a02a000
thread -> get_next_buffer_smart: memory read into buffer failed.thread -> get_next_buffer_smart: failsafe memory read into buffer failed.

And so on.. xd

vykt commented 7 months ago

Latest release v0.0.3 will output errno (via perror) to help identify precisely why this is occuring. It requires Libpwu v0.1.4. Hopefully it's just an EAGAIN / EWOULDBLOCK.

I have not been able to replicate this error on any of my machines while scanning similarly large processes. If you're available to look into this more closely, I'd like to run through your example together. I am @vykt on Discord.

Thanks.

vykt commented 7 months ago

Fixed in indev branch.