Skip to content

Instantly share code, notes, and snippets.

@HerrSpace
Created May 9, 2021 13:37
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save HerrSpace/936b42ec4bd6bc9a541525401e24884a to your computer and use it in GitHub Desktop.
Save HerrSpace/936b42ec4bd6bc9a541525401e24884a to your computer and use it in GitHub Desktop.
Darwin spaces-iMac-Pro.local 20.3.0 Darwin Kernel Version 20.3.0: Sat Mar 20 19:47:58 CET 2021; space:xnu-7195.81.3/BUILD/obj/KASAN_X86_64 x86_64
space@spaces-iMac-Pro ~ % lldb kernel/xnu-7195.81.3/BUILD/obj/KASAN_X86_64/kernel.kasan
[...]
(lldb) disas -n getppid
kernel.kasan`getppid:
kernel.kasan[0xffffff80016f79e0] <+0>: pushq %rbp
kernel.kasan[0xffffff80016f79e1] <+1>: movq %rsp, %rbp
kernel.kasan[0xffffff80016f79e4] <+4>: pushq %r15
kernel.kasan[0xffffff80016f79e6] <+6>: pushq %r14
kernel.kasan[0xffffff80016f79e8] <+8>: pushq %rbx
kernel.kasan[0xffffff80016f79e9] <+9>: pushq %rax
kernel.kasan[0xffffff80016f79ea] <+10>: movq %rdx, %r14
kernel.kasan[0xffffff80016f79ed] <+13>: movq %rdi, %rbx
kernel.kasan[0xffffff80016f79f0] <+16>: movabsq $-0x2000080000000000, %r15 ; imm = 0xDFFFF80000000000
kernel.kasan[0xffffff80016f79fa] <+26>: leaq 0xbcfd77(%rip), %rdi ; l___sancov_gen_.2
kernel.kasan[0xffffff80016f7a01] <+33>: callq 0xffffff8001d8c4c0 ; __sanitizer_cov_trace_pc_guard at ksancov.c:231
kernel.kasan[0xffffff80016f7a06] <+38>: addq $0x20, %rbx
kernel.kasan[0xffffff80016f7a0a] <+42>: movq %rbx, %rax
kernel.kasan[0xffffff80016f7a0d] <+45>: shrq $0x3, %rax
kernel.kasan[0xffffff80016f7a11] <+49>: movb (%rax,%r15), %al
kernel.kasan[0xffffff80016f7a15] <+53>: testb %al, %al
kernel.kasan[0xffffff80016f7a17] <+55>: jne 0xffffff80016f7a3a ; <+90> at kern_prot.c:195:15
kernel.kasan[0xffffff80016f7a19] <+57>: movl (%rbx), %eax
kernel.kasan[0xffffff80016f7a1b] <+59>: movq %r14, %rcx
kernel.kasan[0xffffff80016f7a1e] <+62>: shrq $0x3, %rcx
kernel.kasan[0xffffff80016f7a22] <+66>: movb (%rcx,%r15), %cl
kernel.kasan[0xffffff80016f7a26] <+70>: testb %cl, %cl
kernel.kasan[0xffffff80016f7a28] <+72>: jne 0xffffff80016f7a50 ; <+112> at kern_prot.c:195:10
kernel.kasan[0xffffff80016f7a2a] <+74>: movl %eax, (%r14)
kernel.kasan[0xffffff80016f7a2d] <+77>: xorl %eax, %eax
kernel.kasan[0xffffff80016f7a2f] <+79>: addq $0x8, %rsp
kernel.kasan[0xffffff80016f7a33] <+83>: popq %rbx
kernel.kasan[0xffffff80016f7a34] <+84>: popq %r14
kernel.kasan[0xffffff80016f7a36] <+86>: popq %r15
kernel.kasan[0xffffff80016f7a38] <+88>: popq %rbp
kernel.kasan[0xffffff80016f7a39] <+89>: retq
kernel.kasan[0xffffff80016f7a3a] <+90>: movl %ebx, %ecx
kernel.kasan[0xffffff80016f7a3c] <+92>: andb $0x7, %cl
kernel.kasan[0xffffff80016f7a3f] <+95>: addb $0x3, %cl
kernel.kasan[0xffffff80016f7a42] <+98>: cmpb %al, %cl
kernel.kasan[0xffffff80016f7a44] <+100>: jl 0xffffff80016f7a19 ; <+57> at kern_prot.c:195:15
kernel.kasan[0xffffff80016f7a46] <+102>: movq %rbx, %rdi
kernel.kasan[0xffffff80016f7a49] <+105>: callq 0xffffff8001d7fc10 ; __asan_report_load4 at kasan.c:562
kernel.kasan[0xffffff80016f7a4e] <+110>: ud2
kernel.kasan[0xffffff80016f7a50] <+112>: movl %r14d, %edx
kernel.kasan[0xffffff80016f7a53] <+115>: andb $0x7, %dl
kernel.kasan[0xffffff80016f7a56] <+118>: addb $0x3, %dl
kernel.kasan[0xffffff80016f7a59] <+121>: cmpb %cl, %dl
kernel.kasan[0xffffff80016f7a5b] <+123>: jl 0xffffff80016f7a2a ; <+74> at kern_prot.c:195:10
kernel.kasan[0xffffff80016f7a5d] <+125>: movq %r14, %rdi
kernel.kasan[0xffffff80016f7a60] <+128>: callq 0xffffff8001d7fc30 ; __asan_report_store4 at kasan.c:562
kernel.kasan[0xffffff80016f7a65] <+133>: ud2
(lldb) ^D
space@spaces-iMac-Pro ~ % ./kernel/xnu-7195.81.3/san/tools/a.out
opened ksancov on fd 3
nedges (edgemap) = 272701
mapped to 0x10b051000 + 262168
maxpcs = 65536
ppid = 624
head = 54
0xffffff8001955dec
0xffffff80005c5314
0xffffff80016f5bff
0xffffff80016f5c50
0xffffff8001955eab
0xffffff8000550eff
0xffffff800053681f
0xffffff80005c50f2
0xffffff80016f7717
0xffffff80016f775c
0xffffff80005b585e
0xffffff80005b58a9
0xffffff80019560d0
0xffffff800195623b
0xffffff800163f030
0xffffff800163f18b
0xffffff80016f5864
0xffffff80016f5875
0xffffff80019565db
0xffffff8001956620
0xffffff8001707a05
0xffffff800195678e
0xffffff80019569f1
0xffffff8000572fb6
0xffffff80005662af
0xffffff8000573025
0xffffff8001956d03
0xffffff8001956d8b
0xffffff80016f5cd5
0xffffff80016f5d16
0xffffff8001956ec5
0xffffff8001d8fe45
0xffffff8001d8fe76
0xffffff8001d8ec4b
0xffffff8001d8ec61
0xffffff8001d8eb54
0xffffff8001d8ece4
0xffffff8001d8ed14
0xffffff8001d8e58b
0xffffff8001d8eb54
0xffffff8001d8eb54
0xffffff8001d8eb54
0xffffff8001d8eb54
0xffffff8001d8e64e
0xffffff8001d8e72f
0xffffff8001d8e7bd
0xffffff8001d8e911
0xffffff8001d8e969
0xffffff8001d8e969
0xffffff8001d8e969
0xffffff8001d8e969
0xffffff8001d8e977
0xffffff8001d8e9c1
0xffffff8001d8e9b0
close = 0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment