Struct libafl_qemu::emu::Emulator

source · [−]

pub struct Emulator { /* private fields */ }

Implementations

source

impl Emulator

source

pub fn new(args: &[String], env: &[(String, String)]) -> Emulator

source

pub fn mappings(&self) -> GuestMapsⓘNotable traits for GuestMaps`impl Iterator for GuestMaps type Item = MapInfo;`

This function gets the memory mappings from the emulator.

source

pub fn write_reg<R, T>(&self, reg: R, val: T) -> Result<(), String> where
T: Num + PartialOrd + Copy,
R: Into<i32>,

source

pub fn read_reg<R, T>(&self, reg: R) -> Result<T, String> where
T: Num + PartialOrd + Copy,
R: Into<i32>,

source

pub fn set_breakpoint(&self, addr: GuestAddr)

source

pub fn remove_breakpoint(&self, addr: GuestAddr)

source

pub fn set_hook(
    &self,
    addr: GuestAddr,
    callback: extern "C" fn(_: GuestAddr, _: u64),
    data: u64,
    invalidate_block: bool
) -> usize

source

pub fn remove_hook(&self, addr: GuestAddr, invalidate_block: bool) -> usize

source

pub unsafe fn run(&self)

This function will run the emulator until the next breakpoint, or until finish.

Safety

Should, in general, be safe to call. Of course, the emulated target is not contained securely and can corrupt state or interact with the operating system.

source

pub fn binary_path<'a>(&self) -> &'a str

source

pub fn load_addr(&self) -> GuestAddr

source

pub fn get_brk(&self) -> GuestAddr

source

pub fn set_brk(&self, brk: GuestAddr)

source

pub fn get_mmap_start(&self) -> GuestAddr

source

pub fn set_mmap_start(&self, start: GuestAddr)

source

pub fn map_private(
 &self,
 addr: GuestAddr,
 size: usize,
 perms: MmapPerms
) -> Result<GuestAddr, String>

source

pub fn map_fixed(
 &self,
 addr: GuestAddr,
 size: usize,
 perms: MmapPerms
) -> Result<GuestAddr, String>

source

pub fn mprotect(
 &self,
 addr: GuestAddr,
 size: usize,
 perms: MmapPerms
) -> Result<(), String>

source

pub fn unmap(&self, addr: GuestAddr, size: usize) -> Result<(), String>

source

pub fn flush_jit(&self)

source

pub fn add_edge_hooks(
 &self,
 gen: Option<extern "C" fn(_: GuestAddr, _: GuestAddr, _: u64) -> u64>,
 exec: Option<extern "C" fn(_: u64, _: u64)>,
 data: u64
)

source

pub fn add_block_hooks(
 &self,
 gen: Option<extern "C" fn(_: GuestAddr, _: u64) -> u64>,
 exec: Option<extern "C" fn(_: u64, _: u64)>,
 data: u64
)

source

pub fn add_read_hooks(
 &self,
 gen: Option<extern "C" fn(_: GuestAddr, _: usize, _: u64) -> u64>,
 exec1: Option<extern "C" fn(_: u64, _: GuestAddr, _: u64)>,
 exec2: Option<extern "C" fn(_: u64, _: GuestAddr, _: u64)>,
 exec4: Option<extern "C" fn(_: u64, _: GuestAddr, _: u64)>,
 exec8: Option<extern "C" fn(_: u64, _: GuestAddr, _: u64)>,
 exec_n: Option<extern "C" fn(_: u64, _: GuestAddr, _: usize, _: u64)>,
 data: u64
)

source

pub fn add_write_hooks(
 &self,
 gen: Option<extern "C" fn(_: GuestAddr, _: usize, _: u64) -> u64>,
 exec1: Option<extern "C" fn(_: u64, _: GuestAddr, _: u64)>,
 exec2: Option<extern "C" fn(_: u64, _: GuestAddr, _: u64)>,
 exec4: Option<extern "C" fn(_: u64, _: GuestAddr, _: u64)>,
 exec8: Option<extern "C" fn(_: u64, _: GuestAddr, _: u64)>,
 exec_n: Option<extern "C" fn(_: u64, _: GuestAddr, _: usize, _: u64)>,
 data: u64
)

source

pub fn add_cmp_hooks(
 &self,
 gen: Option<extern "C" fn(_: GuestAddr, _: usize, _: u64) -> u64>,
 exec1: Option<extern "C" fn(_: u64, _: u8, _: u8, _: u64)>,
 exec2: Option<extern "C" fn(_: u64, _: u16, _: u16, _: u64)>,
 exec4: Option<extern "C" fn(_: u64, _: u32, _: u32, _: u64)>,
 exec8: Option<extern "C" fn(_: u64, _: u64, _: u64, _: u64)>,
 data: u64
)

source

pub fn add_backdoor_hook(
    &self,
    exec: extern "C" fn(_: GuestAddr, _: u64),
    data: u64
)

source

pub fn set_on_thread_hook(&self, hook: extern "C" fn(tid: u32))

source

pub fn set_pre_syscall_hook(
&self,
hook: extern "C" fn(_: i32, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64) -> SyscallHookResult
)

source

pub fn set_post_syscall_hook(
&self,
hook: extern "C" fn(_: u64, _: i32, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64) -> u64
)

source

pub fn add_gdb_cmd(&self, callback: Box<dyn FnMut(&Self, &str) -> bool>)

source

pub fn gdb_reply(&self, output: &str)

Trait Implementations

source

impl Clone for Emulator

source

fn clone(&self) -> Emulator

Returns a copy of the value. Read more

1.0.0 · source

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more

source

impl Debug for Emulator

source

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

Auto Trait Implementations

impl RefUnwindSafe for Emulator

impl Send for Emulator

impl Sync for Emulator

impl Unpin for Emulator

impl UnwindSafe for Emulator

Blanket Implementations

source

impl<T> Any for T where
T: 'static + ?Sized,

source

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more

source

impl<T> Borrow<T> for T where
T: ?Sized,

const: unstable · source

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more

source

impl<T> BorrowMut<T> for T where
T: ?Sized,

const: unstable · source

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more

source

impl<T> From<T> for T

const: unstable · source

fn from(t: T) -> T

Returns the argument unchanged.

source

impl<T, U> Into for T where
U: From<T>,

const: unstable · source

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

source

impl<Tail, T> Prepend<T> for Tail

type PreprendResult = Tail

The Resulting [TupleList], of an Prepend::prepend() call, including the prepended entry. Read more

source

fn prepend(self, value: T) -> (T, <Tail as Prepend<T>>::PreprendResult)

Prepend a value to this tuple, returning a new tuple with prepended value.

source

impl<T> Same<T> for T

type Output = T

Should always be Self

impl<SS, SP> SupersetOf<SS> for SP where
SS: SubsetOf<SP>,

fn to_subset(&self) -> Option<SS>

The inverse inclusion map: attempts to construct self from the equivalent element of its superset. Read more

fn is_in_subset(&self) -> bool

Checks if self is actually part of its subset T (and can be converted to it).

fn to_subset_unchecked(&self) -> SS

Use with care! Same as self.to_subset but without any property checks. Always succeeds.

fn from_subset(element: &SS) -> SP

The inclusion map: converts self to the equivalent element of its superset.

source

impl<T> ToOwned for T where
T: Clone,

type Owned = T

The resulting type after obtaining ownership.

source

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more

source

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more

source

impl<T, U> TryFrom for T where
U: Into<T>,

type Error = Infallible

The type returned in the event of a conversion error.

const: unstable · source

fn try_from(value: U) -> Result<T, <T as TryFrom>::Error>

Performs the conversion.

source

impl<T, U> TryInto for T where
U: TryFrom<T>,

type Error = >::Error

The type returned in the event of a conversion error.

const: unstable · source

fn try_into(self) -> Result<U, >::Error>

Performs the conversion.

Struct libafl_qemu::emu::Emulator

Implementations

impl Emulator

pub fn new(args: &[String], env: &[(String, String)]) -> Emulator

pub fn mappings(&self) -> GuestMapsⓘNotable traits for GuestMapsimpl Iterator for GuestMaps type Item = MapInfo;

pub fn num_cpus(&self) -> usize

pub fn current_cpu(&self) -> Option<CPU>

pub fn cpu_from_index(&self, index: usize) -> CPU

pub fn g2h<T>(&self, addr: GuestAddr) -> *mut T

pub fn h2g<T>(&self, addr: *const T) -> GuestAddr

pub unsafe fn write_mem(&self, addr: GuestAddr, buf: &[u8])

pub unsafe fn read_mem(&self, addr: GuestAddr, buf: &mut [u8])

pub fn num_regs(&self) -> i32

pub fn write_reg<R, T>(&self, reg: R, val: T) -> Result<(), String> where T: Num + PartialOrd + Copy, R: Into<i32>,

pub fn read_reg<R, T>(&self, reg: R) -> Result<T, String> where T: Num + PartialOrd + Copy, R: Into<i32>,

pub fn set_breakpoint(&self, addr: GuestAddr)

pub fn remove_breakpoint(&self, addr: GuestAddr)

pub fn set_hook( &self, addr: GuestAddr, callback: extern "C" fn(_: GuestAddr, _: u64), data: u64, invalidate_block: bool) -> usize

pub fn remove_hook(&self, addr: GuestAddr, invalidate_block: bool) -> usize

pub unsafe fn run(&self)

Safety

pub fn binary_path<'a>(&self) -> &'a str

pub fn load_addr(&self) -> GuestAddr

pub fn get_brk(&self) -> GuestAddr

pub fn set_brk(&self, brk: GuestAddr)

pub fn get_mmap_start(&self) -> GuestAddr

pub fn set_mmap_start(&self, start: GuestAddr)

pub fn map_private( &self, addr: GuestAddr, size: usize, perms: MmapPerms) -> Result<GuestAddr, String>

pub fn map_fixed( &self, addr: GuestAddr, size: usize, perms: MmapPerms) -> Result<GuestAddr, String>

pub fn mprotect( &self, addr: GuestAddr, size: usize, perms: MmapPerms) -> Result<(), String>

pub fn unmap(&self, addr: GuestAddr, size: usize) -> Result<(), String>

pub fn flush_jit(&self)

pub fn add_edge_hooks( &self, gen: Option<extern "C" fn(_: GuestAddr, _: GuestAddr, _: u64) -> u64>, exec: Option<extern "C" fn(_: u64, _: u64)>, data: u64)

pub fn add_block_hooks( &self, gen: Option<extern "C" fn(_: GuestAddr, _: u64) -> u64>, exec: Option<extern "C" fn(_: u64, _: u64)>, data: u64)

pub fn add_backdoor_hook( &self, exec: extern "C" fn(_: GuestAddr, _: u64), data: u64)

pub fn set_on_thread_hook(&self, hook: extern "C" fn(tid: u32))

pub fn set_pre_syscall_hook( &self, hook: extern "C" fn(_: i32, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64) -> SyscallHookResult)

pub fn set_post_syscall_hook( &self, hook: extern "C" fn(_: u64, _: i32, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64) -> u64)

pub fn add_gdb_cmd(&self, callback: Box<dyn FnMut(&Self, &str) -> bool>)

pub fn gdb_reply(&self, output: &str)

Trait Implementations

impl Clone for Emulator

fn clone(&self) -> Emulator

fn clone_from(&mut self, source: &Self)

impl Debug for Emulator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Auto Trait Implementations

impl RefUnwindSafe for Emulator

impl Send for Emulator

impl Sync for Emulator

impl Unpin for Emulator

impl UnwindSafe for Emulator

Blanket Implementations

impl<T> Any for T where T: 'static + ?Sized,

fn type_id(&self) -> TypeId

impl<T> Borrow<T> for T where T: ?Sized,

fn borrow(&self) -> &T

impl<T> BorrowMut<T> for T where T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

impl<T> From<T> for T

fn from(t: T) -> T

impl<T, U> Into<U> for T where U: From<T>,

fn into(self) -> U

impl<Tail, T> Prepend<T> for Tail

type PreprendResult = Tail

fn prepend(self, value: T) -> (T, <Tail as Prepend<T>>::PreprendResult)

impl<T> Same<T> for T

type Output = T

impl<SS, SP> SupersetOf<SS> for SP where SS: SubsetOf<SP>,

fn to_subset(&self) -> Option<SS>

fn is_in_subset(&self) -> bool

fn to_subset_unchecked(&self) -> SS

fn from_subset(element: &SS) -> SP

impl<T> ToOwned for T where T: Clone,

type Owned = T

fn to_owned(&self) -> T

fn clone_into(&self, target: &mut T)

impl<T, U> TryFrom<U> for T where U: Into<T>,

type Error = Infallible

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

pub fn mappings(&self) -> GuestMapsⓘNotable traits for GuestMaps`impl Iterator for GuestMaps type Item = MapInfo;`

pub fn write_reg<R, T>(&self, reg: R, val: T) -> Result<(), String> where
T: Num + PartialOrd + Copy,
R: Into<i32>,

pub fn read_reg<R, T>(&self, reg: R) -> Result<T, String> where
T: Num + PartialOrd + Copy,
R: Into<i32>,

pub fn set_hook(
&self,
addr: GuestAddr,
callback: extern "C" fn(_: GuestAddr, _: u64),
data: u64,
invalidate_block: bool
) -> usize

pub fn map_private(
&self,
addr: GuestAddr,
size: usize,
perms: MmapPerms
) -> Result<GuestAddr, String>

pub fn map_fixed(
&self,
addr: GuestAddr,
size: usize,
perms: MmapPerms
) -> Result<GuestAddr, String>

pub fn mprotect(
&self,
addr: GuestAddr,
size: usize,
perms: MmapPerms
) -> Result<(), String>

pub fn add_edge_hooks(
&self,
gen: Option<extern "C" fn(_: GuestAddr, _: GuestAddr, _: u64) -> u64>,
exec: Option<extern "C" fn(_: u64, _: u64)>,
data: u64
)

pub fn add_block_hooks(
&self,
gen: Option<extern "C" fn(_: GuestAddr, _: u64) -> u64>,
exec: Option<extern "C" fn(_: u64, _: u64)>,
data: u64
)

pub fn add_backdoor_hook(
&self,
exec: extern "C" fn(_: GuestAddr, _: u64),
data: u64
)

pub fn set_pre_syscall_hook(
&self,
hook: extern "C" fn(_: i32, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64) -> SyscallHookResult
)

pub fn set_post_syscall_hook(
&self,
hook: extern "C" fn(_: u64, _: i32, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64, _: u64) -> u64
)

impl<T> Any for T where
T: 'static + ?Sized,

impl<T> Borrow<T> for T where
T: ?Sized,

impl<T> BorrowMut<T> for T where
T: ?Sized,

impl<T, U> Into<U> for T where
U: From<T>,

impl<SS, SP> SupersetOf<SS> for SP where
SS: SubsetOf<SP>,

impl<T> ToOwned for T where
T: Clone,

impl<T, U> TryFrom<U> for T where
U: Into<T>,

impl<T, U> TryInto<U> for T where
U: TryFrom<T>,

impl<V, T> VZip<V> for T where
V: MultiLane<T>,