基于内核跟踪的动态函数调用图生成方法  

Dynamic call graph based on OS kernel trace

作　　者：向勇[1] 汤卫东[1] 杜香燕 孙卫真[2] 

机构地区：[1]清华大学计算机科学与技术系,北京100084 [2]首都师范大学信息工程学院,北京100048

出　　处：《计算机应用研究》2015年第4期1095-1099,共5页Application Research of Computers

基　　金：核高基项目(2012ZX01039-003;2012ZX01039-004-01-3)

摘　　要：针对目前大多数的函数调用关系分析工具无法分析函数指针、系统启动过程以及可加载模块的函数调用关系的现象,在CG-RTL的基础上提出了基于内核跟踪的动态函数调用图生成方法,并开发了动态函数调用图生成工具DCG-RTL(dynamic call graph based on RTL)。DCG-RTL在S2E模拟器中运行待跟踪内核,通过指令捕获插件和函数解析插件记录运行时的函数调用和返回信息,分析跟踪信息得到动态和静态函数调用关系,利用CG-RTL工具在浏览器中展示。实验结果表明,DCG-RTL能全面和准确地跟踪包括函数指针引用和可加载内核模块在内的函数调用关系。Most of currently function call relationships analysis tools can not analyse pointer function,system start processing and loadable kernel module,in order to solve the above problem,this paper proposed on a way based on CG-RTL with the name ＂dynamic call graph based on OS kernel tracking＂and developed a call graph tool binding static and dynamic functions（ DCG-RTL）. First running system in virtual machine（ S2E）,and the same time tracing function called and returned information through Linux Call Monitor and SymbolResovler Plugins,second regulated the data into standized data,and last binding dynamic and static data into CG-RTL. DCG-RTL inherited and developmented CG-RTL made it more humanized and easy to use and provided more functional. Experimental results show that,DCG-RTL can provide pointor function relationships,and can analyse the function call with loadable modules.

关 键 词：内核跟踪 内核函数调用检测 函数符号解析 函数指针 函数调用图 内核可加载模块 

分 类 号：TP311.56[自动化与计算机技术—计算机软件与理论]