Skip to content

taint2 - taint query on invalid address, but pypanda can read the physical address #1608

@fredfrance-oss

Description

@fredfrance-oss

I have a linux 64 bit machine with 4gb ram.
I am using pypanda to taint data, however some addresses I get cannot be tainted due to the exception:
PANDA[taint2]: Fatal error- taint query on invalid address 0x...

I note that I am able to read the virtual addresses eg 0x7fffc4050330 (using panda.virtual_memory_read) and also the physical address 0x102f47330 (using panda.physical_memory_read)

However when I try to taint the physical address using panda.taint_label_ram(paddr, cnt) i get the exception
PANDA[taint2]: Fatal error- taint query on invalid address 0x102f47330

I note that 0x102f47330 seems to be more than my 4gb ram, and adding a check not to taint anything above 0x100000000, then my script runs fine.

Does taint2 handle physical addresses differently and is there something I can do to get this working?
Also, why do I have physical addresses above 4gb?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions