3 ms·
Right but there are many analysis code written under Unicorn-engine that are architecture-specific. I do not think we could do that yet with the new QEMU TCG p
by egberts1 5y ago
Right but there are many analysis code written under Unicorn-engine that are architecture-specific.
I do not think we could do that yet with the new QEMU TCG plug-in framework.
- stsquad 5y agoThe plugins have access to the instruction stream to make architecture specific decisions. What I meant by architecture independent is that it doesn't involve per-guest annotations in the frontends to handle - any guest using the common translator loop (which is all of them now) can be instrumented by plugins. However I absolutely agree its not currently as full featured as we would like. The next step when I get time is re-factoring the handling of register values in the core QEMU code so we can expose them to the plugins in a clean API.