1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
/*
* green-eye TCG trace plugin - full instruction/memory activity recording.
*
* This is the "complete map" upgrade from stop-based observation: QEMU calls
* the plugin for every translated instruction and every memory access. Output
* is JSONL (one object per line), ready to be folded into a green-eye session:
*
* {"t":"exec","vcpu":0,"pc":"0x80000194"}
* {"t":"write","vcpu":0,"addr":"0x80000850","size":8}
* {"t":"read","vcpu":0,"addr":"0x10000005","size":1}
* {"t":"summary","insns":12345,"mem":678}
*
* Arguments (all optional):
* path=FILE output file (default greeneye-trace.jsonl)
* exec=on|off record instruction execution (default off; heavy)
* start=0xADDR only instrument PCs >= start
* end=0xADDR only instrument PCs <= end
*
* Build: make -C qemu (needs qemu-plugin.h, vendored here)
* Run: qemu-system-riscv64 ... \
* -plugin qemu/greeneye-trace.so,path=/tmp/ge-trace.jsonl,exec=on
*
* License: GPL-2.0-or-later (matches QEMU's plugin API header).
*/
#include <inttypes.h>
#include <stdbool.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <qemu-plugin.h>
QEMU_PLUGIN_EXPORT int qemu_plugin_version = QEMU_PLUGIN_VERSION;
static FILE *trace_fp;
static bool trace_exec;
static uint64_t start_pc;
static uint64_t end_pc;
static uint64_t insn_count;
static uint64_t mem_count;
static void vcpu_insn_exec(unsigned int vcpu_index, void *userdata)
{
uint64_t pc = (uint64_t)(uintptr_t)userdata;
insn_count++;
fprintf(trace_fp, "{\"t\":\"exec\",\"vcpu\":%u,\"pc\":\"0x%" PRIx64 "\"}\n",
vcpu_index, pc);
}
static void vcpu_mem(unsigned int vcpu_index, qemu_plugin_meminfo_t info,
uint64_t vaddr, void *userdata)
{
bool is_store = qemu_plugin_mem_is_store(info);
unsigned int shift = qemu_plugin_mem_size_shift(info);
(void)userdata;
mem_count++;
fprintf(trace_fp,
"{\"t\":\"%s\",\"vcpu\":%u,\"addr\":\"0x%" PRIx64 "\",\"size\":%u}\n",
is_store ? "write" : "read", vcpu_index, vaddr, 1u << shift);
}
static void vcpu_tb_trans(qemu_plugin_id_t id, struct qemu_plugin_tb *tb)
{
size_t n = qemu_plugin_tb_n_insns(tb);
(void)id;
for (size_t i = 0; i < n; i++) {
struct qemu_plugin_insn *insn = qemu_plugin_tb_get_insn(tb, i);
uint64_t pc = qemu_plugin_insn_vaddr(insn);
if (start_pc && pc < start_pc) {
continue;
}
if (end_pc && pc > end_pc) {
continue;
}
if (trace_exec) {
qemu_plugin_register_vcpu_insn_exec_cb(
insn, vcpu_insn_exec, QEMU_PLUGIN_CB_NO_REGS,
(void *)(uintptr_t)pc);
}
qemu_plugin_register_vcpu_mem_cb(insn, vcpu_mem, QEMU_PLUGIN_CB_NO_REGS,
QEMU_PLUGIN_MEM_RW, NULL);
}
}
static void plugin_exit(qemu_plugin_id_t id, void *userdata)
{
(void)id;
(void)userdata;
if (trace_fp) {
fprintf(trace_fp,
"{\"t\":\"summary\",\"insns\":%" PRIu64 ",\"mem\":%" PRIu64 "}\n",
insn_count, mem_count);
fclose(trace_fp);
trace_fp = NULL;
}
qemu_plugin_outs("green-eye trace complete\n");
}
QEMU_PLUGIN_EXPORT int qemu_plugin_install(qemu_plugin_id_t id,
const qemu_info_t *info, int argc,
char **argv)
{
const char *path = "greeneye-trace.jsonl";
(void)info;
for (int i = 0; i < argc; i++) {
if (strncmp(argv[i], "path=", 5) == 0) {
path = argv[i] + 5;
} else if (strncmp(argv[i], "exec=", 5) == 0) {
trace_exec = strcmp(argv[i] + 5, "on") == 0
|| strcmp(argv[i] + 5, "true") == 0;
} else if (strncmp(argv[i], "start=", 6) == 0) {
start_pc = strtoull(argv[i] + 6, NULL, 0);
} else if (strncmp(argv[i], "end=", 4) == 0) {
end_pc = strtoull(argv[i] + 4, NULL, 0);
}
}
trace_fp = fopen(path, "w");
if (!trace_fp) {
qemu_plugin_outs("green-eye: cannot open trace output\n");
return -1;
}
qemu_plugin_register_vcpu_tb_trans_cb(id, vcpu_tb_trans);
qemu_plugin_register_atexit_cb(id, plugin_exit, NULL);
qemu_plugin_outs("green-eye trace plugin armed\n");
return 0;
}
|
