seek for help

[lulupear]

I am a researcher in Beijing Jiaotong University. I performed hInjector at my computer without patching. Xen may crashed, in this case I suppose, but it dosen't. The experimental environment is built as exactly as you stated in the paper except code of xen-4.4.1 is modified for vulnerability CVE-2012-5513. I do not know why. Should I try xen-4.1.0? I really want you to give me some advises. I really expect and appreciate for your help.

[CSendner]

Hey! Without patching the xen-source, it won’t work. You need to alter the shared_info struct in order to communicate with the also build-in filter. Otherwise every hypercall will be intercepted and none will be executed. Greetings, Christoph

Am 29.03.2015 um 07:07 schrieb lulupear [email protected]:

I am a researcher in Beijing Jiaotong University. I performed hInjector at my computer without patching. Xen may crashed, in this case I suppose, but it dosen't. The experimental environment is built as exactly as you stated in the paper except code of xen-4.4.1 is modified for vulnerability CVE-2012-5513. I do not know why. Should I try xen-4.1.0? I really want you to give me some advises. I really expect and appreciate for your help.

—
Reply to this email directly or view it on GitHub #1.

[lulupear]

Thank you for your response. I didn't patch because i thought patching will keep Xen from crashing(the component "filter" will works if i patched and "filter" keeps Xen from crashing"), doesn't it?

[CSendner]

Hey, yes, you’re right. We didn’t want Xen to crash, so we can run more tests without restarting. You can disable the filter by changing the „offset“ in your hinjLKM.c at line 517 or just comment it.

Am 29.03.2015 um 13:35 schrieb lulupear [email protected]:

Thank you for your response. I didn't patch because i thought patching will keep Xen from crashing(the component "filter" will works if i patched and "filter" keeps Xen from crashing"), doesn't it?

—
Reply to this email directly or view it on GitHub #1 (comment).

[lulupear]

OK, thanks!! I will try as you said, thanks again!

[lulupear]

Hey, I am sorry to bother you again, i tried but failed again. I run hInjector.py in Dom0 other than a guest virtual machine, is that ok?(value of domid in config has been changed to "0" ) Is there any other place i shoud alter?
expect your response T.T

[CSendner]

To get some things straight:

your Xen is working fine. In order to crash it, you built an xml-file and tried to run it with the hinjector. But it won’t crash. Do you get some errors via dmsg? Is everything compiled? (sender and LKM) Did you alter your arch_shared_info-struct within the kernel/system-headers?

1e3d903 1e3d903 <— did you read these instructions?

Am 29.03.2015 um 15:33 schrieb lulupear [email protected]:

Hey, I am sorry to bother you again, i tried but failed again. I run hInjector.py in Dom0 other than a guest virtual machine, is that ok?(value of domid in config has been changed to "0" ) Is there any other place i shoud alter?
expect your response T.T

—
Reply to this email directly or view it on GitHub #1 (comment).

[lulupear]

yes, I have read those instructions before experiment and altered arch_shared_info-struct within the kernel/system-headers, I will check everything again and try to get some message via dmsg. Thanks for advice. :-D ...in addition, I performed hInjector in dom0, is that ok? because i have problem creating guest virtual machine. Greetings, LuLi

[CSendner]

Yeah, it should be okay. What kind of problems creating a guest do you have?

Am 30.03.2015 um 08:26 schrieb lulupear [email protected]:

yes, I have read those instructions before experiment and altered arch_shared_info-struct within the kernel/system-headers, I will check everything again and try to get some message via dmsg. Thanks for advice. :-D ...in addition, I performed hInjector in dom0, is that ok? because i have problem creating guest virtual machine. Greetings, LuLi

—
Reply to this email directly or view it on GitHub #1 (comment).

[lulupear]

Kinds of syntax errors turned up when i compiled libvirt using “make” and we didn‘t work it out over a week.

[CSendner]

Any progress compiling xen?

[lulupear]

Sorry that i just find this message. I have suspended the project for making time to get a job and just return to previous work these days. And i did trigger the vulnerability once but i can't succeed again. Obviously, i have not really figure it out.

[allewwaly]

After comments line 517 at hinjLKM.c and executes the example.xml, my system going to reboot. And after that, no VMs can be created, it just stucks at parsing config file, even after I recompile xen.
What does example.xml do to my system and how to fix that?

[Preetixen]

HI,
sorry but could you tell me if you tried HInjector
Can HInjector be patched with xen 4.6 and does it have some vulnerabiility corresponding to that version?