Al Grant

Client argv not NULL terminated

1

Docs say "The client's options are passed directly to its dr_client_main() initialization routine, in the same manner as arguments are passed to a regular application's main() routine". The C standard...

The AESE Qd,Qn instruction reads both operands and write Qd. As far as I understand DYnamoRIO's conventions, it should decode this as two source operands, i.e. when an encoding specifies...

CRASH ASSERT running shell script on ARM

1

Using latest trunk. Running on Ubuntu 18.04 on Arm (32-bit on a Neoverse N1 platform). Trying to run Firefox. /usr/bin/firefox is a shell script so /bin/dash is invoked. DR can...

In active_events.c 'pe' is a perf_event_attr, in fuzzer.c 'pe' is a pointer to perf_event_attr. parse_open_event is called with &pe both times. This is likely to crash or corrupt something, and...

Claim tags need clarification

1

Various devices implement a claim tag register which can be used by different agents (e.g. external and self-hosted debug) to negotiate access. Use of these bits relies on agents adopting...

ETS is a configuration option for TMC (Trace Macrocell). It's a bit like an ETR in that it's an ATB sink that writes to a bus, but it has a...

cs_topology_sysfs reads sysfs device nodes and discovers CoreSight devices and also ATB connections. Now that the CoreSight support in the kernel has been extended to support CTI (and CTI connections...

Current DynamoRIO. On Linux, unset PATH. Run drrun. Segmentation fault occurs. `drfront_searchenv()` isn't checking the result of `getenv()`. It needs to check for NULL, and should probably return the same...