Page MenuHomeFreeBSD

vmmdev: return EFAULT when trying to read beyond VM system memory max address
ClosedPublic

Authored by antoine on Apr 22 2018, 7:30 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Nov 24, 12:44 PM
Unknown Object (File)
Sun, Nov 24, 3:45 AM
Unknown Object (File)
Sun, Nov 17, 11:43 AM
Unknown Object (File)
Wed, Oct 30, 1:30 AM
Unknown Object (File)
Sep 24 2024, 9:00 AM
Unknown Object (File)
Sep 19 2024, 4:20 PM
Unknown Object (File)
Sep 13 2024, 9:50 AM
Unknown Object (File)
Sep 12 2024, 1:46 PM
Subscribers

Details

Summary

Currently, when using dd(1) to take a VM memory image, the capture never ends,
reading zeroes when it's beyond VM system memory max address.
Return EFAULT when trying to read beyond VM system memory max address.
With the patch, I'm able to take a memory image from a windows guest with dd(1)
and analyse it with tools like volatility or rekall.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 16253
Build 16202: arc lint + arc unit

Event Timeline

This revision is now accepted and ready to land.Apr 22 2018, 3:16 PM
This revision now requires review to proceed.Apr 22 2018, 9:32 PM

Good to go with the name change.

sys/amd64/include/vmm.h
215

Can the name for this be changed to vmm_sysmem_maxaddr ?

This revision is now accepted and ready to land.May 14 2018, 7:13 AM
This revision was automatically updated to reflect the committed changes.