IntelLabs / IntelLabs/kAFL

Generate VM dumps for offline debugging with crash util

Open
#147 1 comment 0 reactions 0 assignees View on GitHub
enhancement help wanted
Dominant language
Makefile
Stars
814
Forks
109
PR merge metrics
No merged PRs in 30d

Description

Save VM image on crash/kasan event to help with debugging (in particular w.r.t. [TDX/SDV setup](https://github.com/intel/ccc-linux-guest-hardening)).

Background:
https://linux.die.net/man/8/crash
File format: https://listman.redhat.com/archives/crash-utility/2008-August/001591.html
Qemu gdb/python plugin: https://github.com/qemu/qemu/blob/master/scripts/dump-guest-memory.py

Qemu also has a native VM dump feature that can be triggered via QMP API:
https://wiki.ubuntu.com/DebuggingKernelWithQEMU#QMP

We can trigger this on kAFL crash event, but crash(8) fails to load the resulting image.

@schumilo confirmed that qmp dump-guest-memory + crash util are working fine for vanilla qemu/kafl setup before and after snapshot. In that case, looks like the bug is caused by TDX/SDV-specific modifications to Qemu, Linux guest, or host KVM?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.