Pin
|
Classes | |
struct | XSAVE_HEADER |
struct | FPSTATE |
struct | CONTEXT |
union | PIN_REGISTER |
union | PIN_WIDE_REGISTER |
Typedefs | |
typedef UTIL::FXSAVE_IA32 | FXSAVE |
typedef UTIL::FXSAVE_INTEL64_DEFAULT | FXSAVE |
typedef struct CONTEXT | CONTEXT |
Enumerations | |
enum | PROCESSOR_STATE { PROCESSOR_STATE_X87, PROCESSOR_STATE_XMM, PROCESSOR_STATE_YMM, PROCESSOR_STATE_ZMM } |
Functions | |
BOOL | PIN_SupportsProcessorState (PROCESSOR_STATE state) |
BOOL | PIN_ContextContainsState (CONTEXT *ctxt, PROCESSOR_STATE state) |
VOID | PIN_SetContextRegval (CONTEXT *ctxt, REG reg, const UINT8 *val) |
VOID | PIN_GetContextRegval (const CONTEXT *ctxt, REG reg, UINT8 *val) |
VOID | PIN_SetContextReg (CONTEXT *ctxt, REG reg, ADDRINT val) |
ADDRINT | PIN_GetContextReg (const CONTEXT *ctxt, REG reg) |
VOID | PIN_SetContextFPState (CONTEXT *ctxt, const FPSTATE *fpstate) |
VOID | PIN_GetContextFPState (const CONTEXT *ctxt, FPSTATE *fpstate) |
REGSET | PIN_GetFullContextRegsSet () |
VOID | PIN_SaveContext (const CONTEXT *ctxtFrom, CONTEXT *ctxtTo) |
VOID | PIN_ExecuteAt (const CONTEXT *ctxt) |
int | PIN_GetInitialContextForUnwind (const CONTEXT *ctxt, void *cursor) |
int | PIN_Backtrace (const CONTEXT *ctxt, void **buffer, int size) |
Variables | |
const size_t | VSTATE_PADDING = 128 |
const size_t | FPSTATE_SIZE = sizeof(FPSTATE) |
const size_t | FPSTATE_ALIGNMENT = 64 |
const size_t | VSTATE_PADDING = 128 |
const size_t | FPSTATE_SIZE = sizeof(FPSTATE) |
const size_t | FPSTATE_ALIGNMENT = 64 |
const ADDRINT | NUM_PHYSICAL_REGS = REG_PHYSICAL_INTEGER_END - REG_PHYSICAL_INTEGER_BASE + 1 |
const ADDRINT | NUM_SCRATCH_REGS = REG_INST_SCRATCH_LAST - REG_INST_SCRATCH_BASE + 1 |
const ADDRINT | NUM_SPECIAL_REGS = 2 + NUM_SCRATCH_REGS |
const ADDRINT | NUM_CONTEXT_INT_REGS = NUM_PHYSICAL_REGS + NUM_SPECIAL_REGS |
const ADDRINT | NUM_CONTEXT_REGS = REG_LAST_CONTEXT_REG + 1 |
const ADDRINT | ARCH_STATE_SIZE |
const ADDRINT | DEFAULT_CONTEXT_IMPL = 0 |
Usually, the tool receives context in the instrumentation callback like THREAD_START_CALLBACK, CONTEXT_CHANGE_CALLBACK, or when it specifies explicitly to pass CONTEXT to the instrumentation routine via IARG_CONTEXT, IARG_CONST_CONTEXT or IARG_PARTIAL_CONTEXT. At this time, the tool can read the individual register value via PIN_GetContextReg and @PIN_GetContextRegval, or save the entire context using the PIN_SaveContext. The PIN_ExecuteAt function can be called from an analysis routine to change the control flow of the thread and start execution from the specified context. The PIN_SetContextReg and PIN_SetContextRegval functions can be used from callbacks to change the thread's given register state. In case where IARG_PARTIAL_CONTEXT was used the behaviour of the threads can be changed by changing registers values without using the PIN_ExecuteAt.
Architectural state of the processor.
The tool should not read or modify data members of this structure directly, but must treat the structure as logically opaque and use the Context manipulation API functions to manage it.
typedef UTIL::FXSAVE_IA32 FXSAVE |
Contains declarations of types related to the fp state on ia-32
The memory layout written by FXSAVE and read by FXRSTOR. It is the legacy part of the FP state
typedef UTIL::FXSAVE_INTEL64_DEFAULT FXSAVE |
Contains declarations of types related to the fp state on Intel64
The memory layout written by FXSAVE and read by FXRSTOR. It is the legacy part of the FP state
enum PROCESSOR_STATE |
enums for queries on the supported state: PIN_SupportsProcessorState and PIN_ContextContainsState
int PIN_Backtrace | ( | const CONTEXT * | ctxt, |
void ** | buffer, | ||
int | size | ||
) |
This function is the equivalent Pin version of backtrace(): While backtrace() generates a backtrace for the Pin (and Pin tool) call stack, PIN_Backtrace() generates a backtrace for the application that Pin is instrumenting.
[in] | ctxt | context of the application - the backtrace will be generated based upon it. |
[out] | buffer | Points to an array on which the backtrace will be stored. |
[in] | size | specifies the maximum number of addresses that can be stored in buffer. |
BOOL PIN_ContextContainsState | ( | CONTEXT * | ctxt, |
PROCESSOR_STATE | state | ||
) |
Query if the specified CONTEXT contains the specified PROCESSOR_STATE.
[in] | ctxt | context to be examined |
[in] | state | the PROCESSOR_STATE being queried |
VOID PIN_ExecuteAt | ( | const CONTEXT * | ctxt | ) |
A tool can call this API to abandon the current analysis function and resume execution of the calling thread at a new application register state. Note that this API does not return back to the caller's analysis function.
This API can be called from an analysis function or a replacement routine, but not from a callback.
When this API is called from an analysis function or replacement function, and if they execute the current routine or instruction being analyzed, then execution will resume at the instrumented routine or instruction and the analysis function will be called again. It is the pintool's responsibility to avoid going into an infinite loop of calls to the analysis function.
[in] | ctxt | New application register state for the calling thread. |
Get the floating point state of the specified context.
[in] | ctxt | context whose floating point state is retrieved |
[in] | fpstate | pointer to the buffer that receives floating point state of the context. the FPSTATE type is exposed by Pin. |
Get the value of the integer register or fp status/control register in the specified context. Note that fp registers such as fp-stack regs, xmm regs, ymm regs (when running with Intel(R) AVX support), can only be read using PIN_GetContextRegval.
[in] | ctxt | context whose register value is requested |
[in] | reg | register whose value is requested. This could be an integer register or a floating point register with integer values, like FP status/control register. |
Get the value of the requested register from the context. This function is applicable for all context registers (integer, fp etc).
[in] | ctxt | context whose register value is requested |
[in] | reg | register whose value is requested |
[out] | val | an empty buffer which will hold the register value, see note below |
REGSET PIN_GetFullContextRegsSet | ( | ) |
Get full REGSET.
When using IARG_PARTIAL_CONTEXT such a regset for both in and out REGSET will provide access to all registers including the ability to update them. Such a usage will provide better performance than using IARG_CONTEXT combined with PIN_ExecuteAt().
int PIN_GetInitialContextForUnwind | ( | const CONTEXT * | ctxt, |
void * | cursor | ||
) |
libbacktrace equivalent implementation
This function is the equivalent Pin version of unw_getcontext(): While unw_getcontext() generates a context for libunwind based on the native context, PIN_GetInitialContextForUnwind() generates a context for libunwind based on Pin CONTEXT.
[in] | ctxt | Pin context to convert to libunwind's context |
[out] | cursor | Points to valid object of type unw_cursor_t which was initialized using unw_init_local(). |
Copy the CONTEXT structure.
CONTEXT structures supplied by Pin to the instrumentation callbacks are not "byte-copyable". The tool should use this function to copy the context provided by Pin and must not attempt to move it as raw memory bytes.
Set the given floating point state in the specified context.
[in,out] | ctxt | context whose floating point state is to be set |
[in] | fpstate | new floating point state of the context. the FPSTATE type is exposed by Pin. |
Set the given value for the integer register or fp status/control register in the specified context. Note that fp registers such as fp-stack regs, xmm regs, ymm regs (when running with Intel(R) AVX support), can only be set using PIN_SetContextRegval.
[in,out] | ctxt | context whose register value is to be set |
[in] | reg | register whose value is to be set. This could be an integer register or a floating point register with integer values, like FP status/control register. |
[in] | val | new value of the register |
Set the given value for the requested register in the context. This function is applicable for all context registers (integer, fp etc.). When this function is used from within a callback, e.g. THREAD_START_CALLBACK, the new context will take effect when the application continues. If this function is called from within an analysis routine, in order for the new context to take effect when the application continues one must do one of the following: Either use IARG_PARTIAL_CONTEXT and specify the registers which should be modified in the "out" REGSET. Or, use the IARG_CONTEXT and call PIN_ExecuteAt (don't forget to set REG_INST_PTR appropriately).
[in,out] | ctxt | context whose register value is to be set |
[in] | reg | register whose value is to be set |
[in] | val | buffer holding the new value of the register, see note below |
BOOL PIN_SupportsProcessorState | ( | PROCESSOR_STATE | state | ) |
Query if Pin supports the specified PROCESSOR_STATE.
[in] | state | the PROCESSOR_STATE being queried |
const ADDRINT ARCH_STATE_SIZE |
Size of the CONTEXT's architectural state in bytes
const ADDRINT DEFAULT_CONTEXT_IMPL = 0 |
A constant that designates default (canonical) CONTEXT implementation.
const size_t FPSTATE_ALIGNMENT = 64 |
This is the alignment that the structure used to save the FPSTATE The alignment required by xsave is 64, the alignment required by fxsave is 16 - so we use the larger
const size_t FPSTATE_ALIGNMENT = 64 |
This is the alignment that the structure used to save the FPSTATE The alignment required by xsave is 64, the alignment required by fxsave is 16 - so we use the larger
const size_t FPSTATE_SIZE = sizeof(FPSTATE) |
Size of Pin's (full) FP state structure. It is larger than the size of the structure used by the fxsave instruction (see FXSAVE). It may be larger than the size of the structure used by the xsave instruction, depending on the features enabled in the xstate_bv field in the extended header.
const size_t FPSTATE_SIZE = sizeof(FPSTATE) |
Size of Pin's (full) FP state structure. It is larger than the size of the structure used by the fxsave instruction (see FXSAVE). It may be larger than the size of the structure used by the xsave instruction, depending on the features enabled in the xstate_bv field in the extended header.
const ADDRINT NUM_CONTEXT_INT_REGS = NUM_PHYSICAL_REGS + NUM_SPECIAL_REGS |
Total number of integer registers in CONTEXT
const ADDRINT NUM_CONTEXT_REGS = REG_LAST_CONTEXT_REG + 1 |
Total number of registers in CONTEXT (app registers + tool registers + special)
const ADDRINT NUM_SPECIAL_REGS = 2 + NUM_SCRATCH_REGS |
REG_SEG_FS_BASE and REG_SEG_GS_BASE are represented as special IA-32/Intel(R) 64 architecture registers
const size_t VSTATE_PADDING = 128 |
Size of the reserved bytes between the XSTATE and the VSTATE parts of the FP state area, as defined by the xsave layout in the SDM.
const size_t VSTATE_PADDING = 128 |
Size of the reserved bytes between the XSTATE and the VSTATE parts of the FP state area, as defined by the xsave layout in the SDM.