Page MenuHomeFreeBSD

vmmdev: return EFAULT when trying to read beyond VM system memory max address
ClosedPublic

Authored by antoine on Apr 22 2018, 7:30 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Nov 17, 11:43 AM
Unknown Object (File)
Wed, Oct 30, 1:30 AM
Unknown Object (File)
Sep 24 2024, 9:00 AM
Unknown Object (File)
Sep 19 2024, 4:20 PM
Unknown Object (File)
Sep 13 2024, 9:50 AM
Unknown Object (File)
Sep 12 2024, 1:46 PM
Unknown Object (File)
Sep 5 2024, 12:40 PM
Unknown Object (File)
Sep 4 2024, 1:03 PM
Subscribers

Details

Summary

Currently, when using dd(1) to take a VM memory image, the capture never ends,
reading zeroes when it's beyond VM system memory max address.
Return EFAULT when trying to read beyond VM system memory max address.
With the patch, I'm able to take a memory image from a windows guest with dd(1)
and analyse it with tools like volatility or rekall.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

This revision is now accepted and ready to land.Apr 22 2018, 3:16 PM
This revision now requires review to proceed.Apr 22 2018, 9:32 PM

Good to go with the name change.

sys/amd64/include/vmm.h
215 ↗(On Diff #41720)

Can the name for this be changed to vmm_sysmem_maxaddr ?

This revision is now accepted and ready to land.May 14 2018, 7:13 AM
This revision was automatically updated to reflect the committed changes.