int (*read)(struct guest_info * core, addr_t guest_addr, void * dst, uint_t length, void * priv_data);
// Called when data is written to a memory page
int (*write)(struct guest_info * core, addr_t guest_addr, void * src, uint_t length, void * priv_data);
+ // Called when memory page is accessed
+ int (*access)(struct guest_info *core, addr_t guest_va, addr_t guest_pa, struct v3_mem_region *region, pf_error_t access_info, void *priv_data);
void * priv_data;
struct v3_mem_region * region;
}
int v3_init_mem_hooks(struct v3_vm_info * vm) {
+ void *temp;
+
struct v3_mem_hooks * hooks = &(vm->mem_hooks);
- hooks->hook_hvas_1 = V3_VAddr(V3_AllocPages(vm->num_cores));
- hooks->hook_hvas_2 = V3_VAddr(V3_AllocPages(vm->num_cores));
+ temp = V3_AllocPages(vm->num_cores);
+
+ if (!temp) {
+ PrintError(vm, VCORE_NONE, "Cannot allocate space for mem hooks\n");
+ return -1;
+ }
+
+ hooks->hook_hvas_1 = V3_VAddr(temp);
+
+ temp = V3_AllocPages(vm->num_cores);
+
+ if (!temp) {
+ PrintError(vm, VCORE_NONE,"Cannot allocate space for mem hooks\n");
+ V3_FreePages(hooks->hook_hvas_1,vm->num_cores);
+ return -1;
+ }
+
+ hooks->hook_hvas_2 = V3_VAddr(temp);
INIT_LIST_HEAD(&(hooks->hook_list));
hooks->reg_table = v3_create_htable(0, mem_hash_fn, mem_eq_fn);
+ hooks->inited=1;
+
return 0;
}
struct mem_hook * tmp = NULL;
+ if (!hooks->inited) {
+ return 0;
+ }
+
// This is nasty...
// We delete the hook info but leave its memory region intact
// We rely on the memory map to clean up any orphaned regions as a result of this
addr_t dst_mem_op_gpa = 0;
int dst_req_size = -1;
+
+ struct mem_hook *access_hook = NULL;
+
+ // Let access hooks take priority
+ access_hook = (struct mem_hook *) reg->priv_data;
+ if (access_hook && access_hook->access) {
+ return access_hook->access(core, guest_va, guest_pa, reg, access_info, access_hook->priv_data);
+ }
+
+
/* Find and decode hooked instruction */
if (core->mem_mode == PHYSICAL_MEM) {
ret = v3_gpa_to_hva(core, get_addr_linear(core, core->rip, &(core->segments.cs)), (addr_t *)&instr_ptr);
}
if (ret == -1) {
- PrintError("Could not translate Instruction Address (%p)\n", (void *)core->rip);
+ PrintError(core->vm_info, core, "Could not translate Instruction Address (%p)\n", (void *)(addr_t)core->rip);
return -1;
}
if (v3_decode(core, (addr_t)instr_ptr, &instr) == -1) {
- PrintError("Decoding Error\n");
+ PrintError(core->vm_info, core, "Decoding Error\n");
return -1;
}
+
// Test source operand, if it's memory we need to do some translations, and handle a possible hook
if (instr.src_operand.type == MEM_OPERAND) {
struct v3_mem_region * src_reg = NULL;
}
}
- if ((guest_pa >= reg->guest_start) &&
- (guest_pa <= reg->guest_end)) {
+ if ((src_mem_op_gpa >= reg->guest_start) &&
+ (src_mem_op_gpa < reg->guest_end)) {
// Src address corresponds to faulted region
src_reg = reg;
} else {
// Note that this should only trigger for string operations
- src_reg = v3_get_mem_region(core->vm_info, core->cpu_id, src_mem_op_gpa);
+ src_reg = v3_get_mem_region(core->vm_info, core->vcpu_id, src_mem_op_gpa);
}
if (src_reg == NULL) {
- PrintError("Error finding Source region (addr=%p)\n", (void *)src_mem_op_gpa);
+ PrintError(core->vm_info, core, "Error finding Source region (addr=%p)\n", (void *)src_mem_op_gpa);
return -1;
}
// We don't check whether the region is a hook here because it doesn't yet matter.
// These hva calculations will be true regardless
if (src_reg->flags.alloced == 0) {
- src_mem_op_hva = (addr_t)(hooks->hook_hvas_1 + (PAGE_SIZE * core->cpu_id));
+ src_mem_op_hva = (addr_t)(hooks->hook_hvas_1 + (PAGE_SIZE * core->vcpu_id));
} else {
// We already have the region so we can do the conversion ourselves
src_mem_op_hva = (addr_t)V3_VAddr((void *)((src_mem_op_gpa - src_reg->guest_start) + src_reg->host_addr));
}
}
- if ((guest_pa >= reg->guest_start) &&
- (guest_pa <= reg->guest_end)) {
+ if ((dst_mem_op_gpa >= reg->guest_start) &&
+ (dst_mem_op_gpa < reg->guest_end)) {
// Dst address corresponds to faulted region
dst_reg = reg;
} else {
// Note that this should only trigger for string operations
- dst_reg = v3_get_mem_region(core->vm_info, core->cpu_id, dst_mem_op_gpa);
+ dst_reg = v3_get_mem_region(core->vm_info, core->vcpu_id, dst_mem_op_gpa);
}
if (dst_reg == NULL) {
- PrintError("Error finding Source region (addr=%p)\n", (void *)dst_mem_op_gpa);
+ PrintError(core->vm_info, core, "Error finding Source region (addr=%p)\n", (void *)dst_mem_op_gpa);
return -1;
}
// We don't check whether the region is a hook here because it doesn't yet matter.
// These hva calculations will be true regardless
if (dst_reg->flags.alloced == 0) {
- dst_mem_op_hva = (addr_t)(hooks->hook_hvas_2 + (PAGE_SIZE * core->cpu_id));
+ dst_mem_op_hva = (addr_t)(hooks->hook_hvas_2 + (PAGE_SIZE * core->vcpu_id));
} else {
// We already have the region so we can do the conversion ourselves
dst_mem_op_hva = (addr_t)V3_VAddr((void *)((dst_mem_op_gpa - dst_reg->guest_start) + dst_reg->host_addr));
mem_op_size = ((uint_t)src_req_size < (uint_t)dst_req_size) ? src_req_size : dst_req_size;
+ if (mem_op_size == -1) {
+ PrintError(core->vm_info, core, "Error: Did not detect any memory operands...\n");
+ return -1;
+ }
+
/* Now handle the hooks if necessary */
if ( (src_hook != NULL) && (src_hook->read != NULL) &&
// Read in data from hook
if (src_hook->read(core, src_mem_op_gpa, (void *)src_mem_op_hva, mem_op_size, src_hook->priv_data) == -1) {
- PrintError("Read hook error at src_mem_op_gpa=%p\n", (void *)src_mem_op_gpa);
+ PrintError(core->vm_info, core, "Read hook error at src_mem_op_gpa=%p\n", (void *)src_mem_op_gpa);
return -1;
}
}
// Read in data from hook
if (dst_hook->read(core, dst_mem_op_gpa, (void *)dst_mem_op_hva, mem_op_size, dst_hook->priv_data) == -1) {
- PrintError("Read hook error at dst_mem_op_gpa=%p\n", (void *)dst_mem_op_gpa);
+ PrintError(core->vm_info, core, "Read hook error at dst_mem_op_gpa=%p\n", (void *)dst_mem_op_gpa);
return -1;
}
}
bytes_emulated = v3_emulate(core, &instr, mem_op_size, src_mem_op_hva, dst_mem_op_hva);
if (bytes_emulated == -1) {
- PrintError("Error emulating instruction\n");
+ PrintError(core->vm_info, core, "Error emulating instruction\n");
return -1;
}
(instr.src_operand.write == 1) ) {
if (src_hook->write(core, src_mem_op_gpa, (void *)src_mem_op_hva, bytes_emulated, src_hook->priv_data) == -1) {
- PrintError("Write hook error at src_mem_op_gpa=%p\n", (void *)src_mem_op_gpa);
+ PrintError(core->vm_info, core, "Write hook error at src_mem_op_gpa=%p\n", (void *)src_mem_op_gpa);
return -1;
}
(instr.dst_operand.write == 1) ) {
if (dst_hook->write(core, dst_mem_op_gpa, (void *)dst_mem_op_hva, bytes_emulated, dst_hook->priv_data) == -1) {
- PrintError("Write hook error at dst_mem_op_gpa=%p\n", (void *)dst_mem_op_gpa);
+ PrintError(core->vm_info, core, "Write hook error at dst_mem_op_gpa=%p\n", (void *)dst_mem_op_gpa);
return -1;
}
}
-
int v3_hook_write_mem(struct v3_vm_info * vm, uint16_t core_id,
addr_t guest_addr_start, addr_t guest_addr_end, addr_t host_addr,
int (*write)(struct guest_info * core, addr_t guest_addr, void * src, uint_t length, void * priv_data),
struct mem_hook * hook = V3_Malloc(sizeof(struct mem_hook));
struct v3_mem_hooks * hooks = &(vm->mem_hooks);
+ if (!hook) {
+ PrintError(vm, VCORE_NONE, "Cannot allocate in hooking memory for full access\n");
+ return -1;
+ }
+
memset(hook, 0, sizeof(struct mem_hook));
hook->write = write;
entry = v3_create_mem_region(vm, core_id, guest_addr_start, guest_addr_end);
+ if (!entry) {
+ PrintError(vm, VCORE_NONE, "Cannot allocate a memory region\n");
+ V3_Free(hook);
+ return -1;
+ }
+
hook->region = entry;
entry->host_addr = host_addr;
entry->flags.alloced = 1;
if (v3_insert_mem_region(vm, entry) == -1) {
+ PrintError(vm, VCORE_NONE, "Cannot insert memory region\n");
V3_Free(entry);
V3_Free(hook);
return -1;
struct mem_hook * hook = V3_Malloc(sizeof(struct mem_hook));
struct v3_mem_hooks * hooks = &(vm->mem_hooks);
+ if (!hook) {
+ PrintError(vm, VCORE_NONE, "Cannot allocate in hooking memory for writing\n");
+ return -1;
+ }
+
memset(hook, 0, sizeof(struct mem_hook));
hook->write = write;
hook->priv_data = priv_data;
entry = v3_create_mem_region(vm, core_id, guest_addr_start, guest_addr_end);
+
+ if (!entry) {
+ PrintError(vm, VCORE_NONE, "Cannot create memory region\n");
+ V3_Free(hook);
+ return -1;
+ }
+
hook->region = entry;
entry->unhandled = handle_mem_hook;
entry->priv_data = hook;
if (v3_insert_mem_region(vm, entry)) {
+ PrintError(vm, VCORE_NONE, "Cannot insert memory region\n");
V3_Free(entry);
V3_Free(hook);
return -1;
}
+int v3_hook_access_mem(struct v3_vm_info * vm, uint16_t core_id,
+ addr_t guest_addr_start, addr_t guest_addr_end,
+ int (*access)(struct guest_info * core,
+ addr_t guest_va,
+ addr_t guest_pa,
+ struct v3_mem_region *reg,
+ pf_error_t access_info,
+ void *priv_data),
+ void * priv_data)
+{
+
+ struct v3_mem_region * entry = NULL;
+ struct mem_hook * hook = V3_Malloc(sizeof(struct mem_hook));
+ struct v3_mem_hooks * hooks = &(vm->mem_hooks);
+
+ if (!hook) {
+ PrintError(vm, VCORE_NONE,"Cannot allocate in hooking memory for access\n");
+ return -1;
+ }
+
+ memset(hook, 0, sizeof(struct mem_hook));
+
+ hook->access = access;
+ hook->priv_data = priv_data;
+
+ entry = v3_create_mem_region(vm, core_id, guest_addr_start, guest_addr_end);
+
+ if (!entry) {
+ PrintError(vm, VCORE_NONE, "Cannot create memory region\n");
+ V3_Free(hook);
+ return -1;
+ }
+
+ hook->region = entry;
+
+ entry->unhandled = handle_mem_hook;
+ entry->priv_data = hook;
+
+ if (v3_insert_mem_region(vm, entry)) {
+ PrintError(vm, VCORE_NONE, "Cannot insert memory region\n");
+ V3_Free(entry);
+ V3_Free(hook);
+ return -1;
+ }
+
+ list_add(&(hook->hook_node), &(hooks->hook_list));
+ v3_htable_insert(hooks->reg_table, (addr_t)entry, (addr_t)hook);
+
+ return 0;
+}
+
+
static int free_hook(struct v3_vm_info * vm, struct mem_hook * hook) {
v3_delete_mem_region(vm, hook->region);
list_del(&(hook->hook_node));
// We do not support unhooking subregions
int v3_unhook_mem(struct v3_vm_info * vm, uint16_t core_id, addr_t guest_addr_start) {
struct v3_mem_region * reg = v3_get_mem_region(vm, core_id, guest_addr_start);
- struct mem_hook * hook = reg->priv_data;
+ struct v3_mem_hooks * hooks = &(vm->mem_hooks);
+ struct mem_hook * hook = NULL;
+
+ if (reg == NULL) {
+ PrintError(vm, VCORE_NONE, "Could not find region at %p\n", (void *)guest_addr_start);
+ return -1;
+ }
+
+ hook = reg->priv_data;
+ if (hook == NULL) {
+ PrintError(vm, VCORE_NONE, "Trying to unhook region that is not a hook at %p\n", (void *)guest_addr_start);
+ return -1;
+ }
+
+
free_hook(vm, hook);
+ v3_htable_remove(hooks->reg_table, (addr_t)reg, 0);
+
return 0;
}
