Thanks Jim, I almost found out that by comparing the INS_Opcode() with XED_ICLASS_SYSENTER/XED_ICLASS_SYSEXIT no such instruction was found in a code withgon1332
Pin only operates inside the user process, so if all you want is to avoid code inside the kernel you need do nothing. -- Jim James Cowniejim.cownie
Hi everyone, I do not want to instrument instructions that are executed by the OS. So I was thinking that if I could find the SYSENTER and SYSEXIT intelgon1332
The tools created using Pin, called Pintools, can be used to perform program analysis on user space applications in Linux and Windows. As a dynamic binary instrumentation tool, instrumentation is performed at run time on the compiled binary files. Thus, it requires no recompiling of source code and can support instrumenting programs that dynamically generate code.
Pin was originally created as a tool for computer architecture analysis, but its flexible API and an active community (called "Pinheads") have created a diverse set of tools for security, emulation and parallel program analysis.
Pin is proprietary software developed and supported by Intel, and is supplied free of charge for non-commercial use together with a kit of reference tools.
When posting a question to our mailing list, be sure to mention your processor, OS, gcc version, and Pin kit number.
- Specific Programs
- Aug 22, 2004
- This is a restricted group.
- Attachments are permitted.
- Members can hide email address.
- Listed in Yahoo Groups directory.
- Membership requires approval.
- Messages are not moderated.
- All members can post messages.