DrTracker: dynamic information flow tracking library

[derekbruening]

From [email protected] on March 09, 2012 09:46:43

xref issue #822 , issue #823 , issue #824 two more Extensions from the original discussion were DrMap for shadow mapping and DrTracker for shadow propagation, or perhaps combining them as DrShadow, or perhaps calling them Umbra (2.0) as we would incorporate Umbra and EMS64 features.

Original issue: http://code.google.com/p/drmemory/issues/detail?id=825

[derekbruening]

From [email protected] on April 30, 2013 08:10:37

it seems that newer kernels load pie binaries at 0x555555550000, which may limit Umbra's mapping scheme.

Owner: [email protected]
Labels: -Priority-Low Priority-Medium

[derekbruening]

From [email protected] on October 17, 2013 12:44:46

Blockedon: drmemory:1350

[derekbruening]

The mapping part, called Umbra, is complete and never used an issue number in its commits, so let's make this issue solely about the "taint tracking" or "dynamic information flow tracking" extension.

[GiuseppeDiGuglielmo]

Is there any documentation describing the Umbra / DrTracker features for dynamic information flow tracking?

[toshipiazza]

@GiuseppeDiGuglielmo Umbra proper has been complete for a while, and can be used on both ARM and on x86. The docs for it are here. I am currently working on research which implements some of what we'd like from DrTracker, though it currently only supports a subset of ARM and has not yet been contributed upstream. If it helps, my research code is all here.

[GiuseppeDiGuglielmo]

@toshipiazza, I would like to try first Umbra and then DrTaint. Is there a running example for Umbra? I could not get too much from the guidelines.

[toshipiazza]

@GiuseppeDiGuglielmo Although the tests might be in some serious need of refactoring, they're a great way to get familiar with its usage. Here's one of the Umbra tests.