[Qemu-devel] [PATCH v2 00/43] Windbg supporting

[Mihail Abakumov]

An update of:

        v1: 
https://lists.nongnu.org/archive/html/qemu-devel/2017-09/msg07092.html

We made the debugger module WinDbg (like GDB) for QEMU. This is the replacement 
of the remote stub in Windows kernel. Used for remote Windows kernel debugging 
without debugging mode.

WinDbg is a multipurpose debugger for the Microsoft Windows computer operating 
system, distributed by Microsoft. Recent versions of WinDbg have been and are 
being distributed as part of the free Debugging Tools for Windows suite.

How to start debugging QEMU using WinDbg:
  Run QEMU with next option:
    -windbg pipe:<name>
  QEMU will start and pause for waiting WinDbg connection.
  Run WinDbg with next options:
    -b -k com:pipe,baud=115200,port=\\.\pipe\<name>,resets=0
  Wait for debugger connect to kernel.

Note: You can add Symbol Search Path in WinDbg such as 
srv*c:\tmp*http://msdl.microsoft.com/download/symbols.

How it works:
The WinDbg debugger has the possibility of connecting to a remote debug service 
(Kdsrv.exe) in the Windows kernel. Therefore, it is possible to connect to the 
guest system running in the QEMU emulator. Kernel debugging is possible only 
with the enabled debugging mode, may change at the same time. Our module of 
WinDbg debugger for QEMU is an alternative of the remote debugging service in 
the kernel. Thus, the debugger connects to the debugging module, not to the 
kernel of the operating system. The module obtains all the necessary 
information answering debugger requests from the QEMU emulator. At the same 
time for debugging there is no need to enable debugging mode in the kernel. 
This leads to hidden debugging. Our module supports all features of WinDbg 
regarding remote debugging, besides interception of events and exceptions. Only 
i386 is supported now.

Changed in v2:

 - Move target specific code in the 'target/' directory. (Alistair Francis)
 - Change 'kd_api_fill_memory'. Made a fill of memory by line segments. Before 
that, a full array was immediately collected and written in RAM. (Ladi Prosek)
 - Change 'kd_api_search_memory'. Made a search for memory by line segments. 
(Ladi Prosek)
 - Change ld* to st* where it needs. (Ladi Prosek)
 - Add a additional check of input arguments in 'windbg_read_context' and 
'windbg_read_ks_regs'. (Ladi Prosek)
 - Fix typos. (Ladi Prosek)
 - Add a fliping back 'windbg_state->is_loaded' after reset VM.
 - Add a check to disabled kvm. It is supported yet. (Ladi Prosek)
 - Add a check to device in windbg option. Only pipe is supporting now. 
(Alistair Francis)
 - Add a check to 'ifdef' WINDBG_DEBUG_ON before define it. (Alistair Francis)
 - Replace printf to qemu_log. (Alistair Francis)
 - Fix build on s390x host. (patchew)
 - Fix code style error. (patchew)

---

Mihail Abakumov (43):
      windbg: added empty windbgstub files
      windbg: added windbg's KD header file
      windbg: modified windbgkd.h
      windbg: added '-windbg' option
      windbg: added helper features
      windbg: added WindbgState
      windbg: added chardev
      windbg: hook to wrmsr operation
      windbg: handler of fs/gs register
      windbg: structures for parsing data stream
      windbg: parsing data stream
      windbg: send data and control packets
      windbg: handler of parsing context
      windbg: init DBGKD_ANY_WAIT_STATE_CHANGE
      windbg: sized data buffer
      windbg: generate ExceptionStateChange
      windbg: generate LoadSymbolsStateChange
      windbg: windbg_vm_stop
      windbg: implemented windbg_process_control_packet
      windbg: implemented windbg_process_data_packet
      windbg: implemented windbg_process_manipulate_packet
      windbg: implemented kd_api_read_virtual_memory and 
kd_api_write_virtual_memory
      windbg: kernel's structures
      windbg: implemented kd_api_get_context and kd_api_set_context
      windbg: implemented kd_api_read_control_space and 
kd_api_write_control_space
      windbg: implemented windbg_read_context
      windbg: implemented windbg_write_context
      windbg: implemented windbg_read_ks_regs
      windbg: implemented windbg_write_ks_regs
      windbg: implemented windbg_set_sr
      windbg: implemented windbg_set_dr
      windbg: implemented windbg_set_dr7
      windbg: implemented windbg_hw_breakpoint_insert and 
windbg_hw_breakpoint_remove
      windbg: implemented kd_api_write_breakpoint and kd_api_restore_breakpoint
      windbg: debug exception subscribing
      windbg: implemented kd_api_continue
      windbg: implemented kd_api_read_io_space and kd_api_write_io_space
      windbg: implemented kd_api_read_physical_memory and 
kd_api_write_physical_memory
      windbg: implemented kd_api_get_version
      windbg: implemented kd_api_read_msr and kd_api_write_msr
      windbg: implemented kd_api_search_memory
      windbg: implemented kd_api_fill_memory
      windbg: implemented kd_api_query_memory


 Makefile.target                 |    5 
 cpus.c                          |   18 
 gdbstub.c                       |    4 
 include/exec/windbgkd.h         |  948 ++++++++++++++++++++++++++
 include/exec/windbgstub-utils.h |  122 +++
 include/exec/windbgstub.h       |   24 +
 include/sysemu/sysemu.h         |    2 
 qemu-options.hx                 |    8 
 stubs/Makefile.objs             |    1 
 stubs/windbgstub.c              |   21 +
 target/i386/Makefile.objs       |    2 
 target/i386/misc_helper.c       |    3 
 target/i386/windbgstub.c        | 1443 +++++++++++++++++++++++++++++++++++++++
 vl.c                            |    8 
 windbgstub-utils.c              |  358 ++++++++++
 windbgstub.c                    |  490 +++++++++++++
 16 files changed, 3455 insertions(+), 2 deletions(-)
 create mode 100755 include/exec/windbgkd.h
 create mode 100755 include/exec/windbgstub-utils.h
 create mode 100755 include/exec/windbgstub.h
 create mode 100755 stubs/windbgstub.c
 create mode 100755 target/i386/windbgstub.c
 create mode 100755 windbgstub-utils.c
 create mode 100755 windbgstub.c

--
Thanks,
Mihail Abakumov