On 8/21/21 11:45 AM, Florian Hauschild wrote:
> Hi all,
>
> I extended the plugin interface with additional functionalities.
> I wrote the extensions for fault injection/exploration reasearch using
> QEMU. The additional functionalities for a plugin are:
> * Read and write guest memory
> * Read and write guest registers
> * Allow plugin to force QEMU into single step mode
> * Flush TB cache from plugin
If something is added to read a register from a plugin, then execlog
plugin could print the operands value of each instruction. This would
definitely be helpful for side-channel analysis: the Hamming weight (sum
of bits) of the last operand roughly models the power consumption
side-channel leakage.
If I recall correctly, there are some concerns about allowing to access
registers inside plugins. Past threads about reading/writing registers:
https://lists.gnu.org/archive/html/qemu-devel/2020-03/msg08741.html
https://lists.gnu.org/archive/html/qemu-devel/2021-04/msg04588.html
Thanks,
-- Alexandre