Derek Bruening
ba4bef0e75
Deprecates the "non-fetched" instruction record in drmemtrace. Increases the drmemtrace trace version number, with all new traces simply omitting any instruction record on non-initial x86 repeated string loops. Adds a new TRACE_TYPE_INSTR_STRING_LOOP type to make it easier to identify string loops ahead of time, as their long sequences of loads and stores may warrant planning in some consumers. This type is considered type_is_instr(). Online traces and filtered-offline traces still generate fetch records, which are removed in the reader for online and raw2trace for offline. Future work will eliminate this for offline; doing so for online is complex, covered by #4948, and not currently planned. Adds buffer output for syscall templates to avoid overflow now that no-fetch records cannot be used as output points. Adds invariant checks that we do not see no-fetch (or maybe-fetch) records in new traces. These checks are once-only per shard. We do expect the no-fetch invariant to show up with the current kernel trace templates. We plan to separately create new templates. Removes "(fetched)" from basic_counts output and only outputs "non-fetched" counts for legacy traces with non-zero counts. This also removes the non-fetched that were being counted by the opcode_mix tool. Updates documentation and tests. Issue: #4915
DynamoRIO
About DynamoRIO
DynamoRIO is a runtime code manipulation system that supports code transformations on any part of a program, while it executes. DynamoRIO exports an interface for building dynamic tools for a wide variety of uses: program analysis and understanding, profiling, instrumentation, optimization, translation, etc. Unlike many dynamic tool systems, DynamoRIO is not limited to insertion of callouts/trampolines and allows arbitrary modifications to application instructions via a powerful IA-32/AMD64/ARM/AArch64 instruction manipulation library. DynamoRIO provides efficient, transparent, and comprehensive manipulation of unmodified applications running on stock operating systems (Windows, Linux, or Android) and commodity IA-32, AMD64, ARM, and AArch64 hardware. Mac OSX support is in progress.
Existing DynamoRIO-based tools
DynamoRIO is the basis for some well-known external tools:
- The Arm Instruction Emulator (ArmIE)
- WinAFL, the Windows fuzzing tool, as an instrumentation and code coverage engine
- The fine-grained profiler for ARM DrCCTProf
- The portable and efficient framework for fine-grained value profilers VClinic
- The sampling-based sanitizer framework GWPSan
Tools built on DynamoRIO and available in the release package include:
- The memory debugging tool Dr. Memory
- The tracing and analysis framework drmemtrace with multiple tools that operate on both online (with multi-process support) and offline instruction and memory address traces:
- The cache simulator drcachesim
- TLB simulation
- Reuse distance
- Reuse time
- Opcode mix
- Function call tracing
- The legacy processor emulator drcpusim
- The "strace for Windows" tool drstrace
- The code coverage tool drcov
- The library tracing tool drltrace
- The memory address tracing tool memtrace (drmemtrace's offline traces are faster with more surrounding infrastructure, but this is a simpler starting point for customized memory address tracing)
- The memory value tracing tool memval
- The instruction tracing tool instrace (drmemtrace's offline traces are faster with more surrounding infrastructure, but this is a simpler starting point for customized instruction tracing)
- The basic block tracing tool bbbuf
- The instruction counting tool inscount
- The dynamic fuzz testing tool Dr. Fuzz
- The disassembly tool drdisas
- And more, including opcode counts, branch instrumentation, etc.: see API samples
Building your own custom tools
DynamoRIO's powerful API abstracts away the details of the underlying infrastructure and allows the tool builder to concentrate on analyzing or modifying the application's runtime code stream. API documentation is included in the release package and can also be browsed online. Slides from our past tutorials are also available.
Downloading DynamoRIO
DynamoRIO is available free of charge as a binary package for both Windows and Linux. DynamoRIO's source code is available primarily under a BSD license.
Obtaining Help
Use the discussion list to ask questions.
To report a bug, use the issue tracker.
See also the DynamoRIO home page: http://dynamorio.org/