decaf-project / DECAF

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Procinfo compilation error on Ubuntu 14.04.5

dkfulp opened this issue · comments

Hello,

I am currently trying to get the information needed in the procinfo.ini file from a new guest that I am setting up. The guest is Ubuntu 14.04.5 and I have moved the Makefile and procinfo.c file over to the guest. Upon compilation it gives the attached error.

I know that these files work since I have used the same ones on an Ubuntu 12.04 guest and it worked fine. Do you know of any reason that this would be breaking?

screen shot 2019-01-23 at 3 30 57 pm

Hi,
The reason is, for the newer Linux kernel, some data structs are changed a little bit. I modified the procinfo.c file to make it compatible with the new kernel struct. Please find the patched procinfo.c here: https://drive.google.com/file/d/1GUN2RQfv-KHz3HPSoksxhQpkTk6gGIrC/view?usp=sharing
and make sure to allocate 2GB ram if VMI functionality is needed.