toshipiazza / drstackvis

Stack Visualizer written in DynamoRIO

DrStackVis

Stack Visualizer written using DynamoRIO. Frontend is in Processing (coming soon).

How To Build

The DynamoRIO Plugin can be built using cmake -DDynamoRIO_DIR=... && make.

TODO

• Determine if we should compute labels/annotations online
  • use a hashtable with a vector? Or only support one label at a time?
  • Since we can view the stack at multiple points in time, it might not matter to support multiple labels per address at a single time.
• Optimizations and code cleanup
  • We should have a filter to determine if a write points to a particular address (i.e. data segment vs stack segment) and fail fast accordingly.
  • We should (possibly) turn all call instructions into a push - jump combo, so that we don't have to work around call instructions specifically.

JSON Output (tentative)

{
  "writes": [
    { "addr": 0x08045890,
      "size": 8,
      "wmem": 0xDEADBEEF,
      "type": "call",
      "sptr": 0xffffffff }, // this is ESP
      ...
  ],
  "stdout": {
    "10000": "<base64 encoding>", // here, 10000 represents an index
      ...                         // into the writes array above
  },
  "stderr": {
    "12000": "<base64 encoding>" },
      ...
  },
  "stk_base": 0xffffffff,
  "stk_ceil": 0xfffffff0
}

Notice

The plugin here was heavily modified from utils.[ch] and memtrace_simple.c, which are included in the sample files of a standard DynamoRIO distribution. Also used for syscall hooking was the syscall.c sample code, also distrbuted with DynamoRIO. These files are all distributed under the BSD 3 clause license. The code in drstackvis.c is distributed under the same license.

The files base64.[ch] are distributed under the apple public license, as well as under the Apache License. The links to these files were found here.