Hello, I am running Ubuntu with GCC 4.3, and the examples (i.e. in SimpleExamples) do not compile (I get an error regarding an illegal reference). Furthermore,...
Hey, I'm using g++ (GCC) 4.2.4 (Ubuntu 4.2.4-1ubuntu3) and it works fine. Can you post the exact error from the compiler (and when you try to run it), and...
nnp
version5@...
May 2, 2009 9:16 pm
3732
Hi, Thanks Julio for reporting this. The fix will be release as part of the next pin kit. Ady. From: pinheads@yahoogroups.com [mailto:pinheads@yahoogroups.com]...
Tal, Ady
ady.tal@...
May 3, 2009 6:43 am
3733
I will be giving a pin tutorial in Taipei. Here is more information: Time: 5/25, 2009, 9:30am to 11:30am, 1:30pm to 15:30pm. Place: Room 106, IIS (Institute...
There is more information about the Taipei Pin tutorial here: http://itanium.iis.sinica.edu.tw/short_course/index.html There is no fee, but you have to...
Hi, I am writing a pintool that outputs the instruction pointer of some instructions. Now I need to find out the source lines that these instruction pointers...
Greeting, I'm working on getting indirect call value. From the instructions such as, call dword ptr ss[ebp+0x8] jmp dword ptr ds[0x6ed2fc] I need to get the...
I need to get the value in segment registers as described above. Actually, you don't. You can use IARG_MEMORY_READ_EA to get the linear address of the...
Hi I want a clarification on the instrumentation process of PIN. PIN rewrites the binary with appropriate instrumentation calls, Are these system calls?, How...
Greeting, pinheads I would like to ask you something that bring me more confusions. The below code is the snapshot I captured using OllyDbg.exe on ALZip.exe, a...
You can also use the IARG_BRANCH_TARGET_ADDR argument type. There is an example in SimpleExamples/calltrace.cpp. Ady. From: pinheads@yahoogroups.com...
Tal, Ady
ady.tal@...
May 7, 2009 10:31 am
3741
Hello, A tool I wrote about weeks ago ceased to function correctly recently. I suspect it is a gcc version issue. For right now, my gcc is 4.2.4. The specific...
Hi, I'm having trouble with a simple instrumentation using PIN_SetContextReg : the change in the register doesn't seem to be effective, the eax register stay...
The documentation for IARG_CONTEXT is a little confusing, and will be fixed in our next Pin kit. Here is the new documentation: Type: "CONTEXT *". Handle to...
BBL_Address(). Pin discovers each BBL as the program runs, so it never knows the total number BBL's in your program. Therefore, there is no API to ask for the...
We are not aware of any problems with gcc 4.2.4, but I don't think we test with that particular release. We test with other 4.2.x and 4.3.x gcc releases. I...
Hi, Can I attach Pin to a running process on Windows XP/Vista using the command-line pin -pid <pid> -t mytool.dll and expect profiling to be done? Can I do...
Hey, I'm working on a taint data flow analysis tool at the moment and for instructions that I haven't yet modelled I want to mark all the registers and memory...
nnp
version5@...
May 11, 2009 4:44 pm
3749
We are working on this. The Pin package you can take now supports only attach to single thread application on Linux. The next version that we plan to release...
I appear to be running the same version and have not encountered any problems. nnp@ubuntudeux:~/$ g++ -v Using built-in specs. Target: i486-linux-gnu ...
nnp
version5@...
May 11, 2009 8:47 pm
3751
You allocated the vector in the instrumentation routine and passed it to the analysis routine. The first time the analysis routine was called you deleted the...
Tal, Ady
ady.tal@...
May 12, 2009 6:32 am
3752
Ah, indeed I did. Is there a recommended idiom for doing something like this? Each register could have a differing number of used registers so I need some sort...
nnp
version5@...
May 12, 2009 10:56 am
3753
Each instruction can have different registers used, but these registers are always the same for a specific instruction. The register values are different and...
Tal, Ady
ady.tal@...
May 12, 2009 1:26 pm
3754
Of course, but there could be millions of instructions and I don't want to have a vector describing each one just hanging around in memory. I need the analysis...
nnp
version5@...
May 12, 2009 5:33 pm
3755
I would recommend something like the following. At instrumentation time, find the set of registers used by the instruction. Sort the registers somehow, so...
Thanks, both of you. That solution seems like it should be effective. On Tue, May 12, 2009 at 7:13 PM, Lueck, Gregory M ... -- http://www.unprotectedhex.com ...
nnp
version5@...
May 14, 2009 2:14 pm
3759
Using IPOINT_AFTER with movs results in an incorrect value for IARG_MEMORYWRITE_EA. The generated code uses push edi to pass the write address. Of course,...
Hi, I am using pin to instrument apache server on Windows. However, when apache is started, two "httpd" process appear, and PIN can only detect the one it...
So here's something I didn't expect. If you overwrite EBP+4 (the stored EIP) with something else, Pin seems to attempt to disassemble/instrument the code at...