KEDR Framework
KEDR is a framework to facilitate dynamic analysis of kernel modules in Linux ("KEDR" is an acronym for "KErnel-mode Drivers in Runtime"). KEDR allows you to intercept the calls that a kernel module makes to the functions exported by other modules and by the kernel proper. The tools provided by the framework can record the arguments and return values of these functions to a trace, perform fault simulation according to user-defined scenarios, and check the kernel modules for memory leaks and some other kinds of problems. Custom data collection and analysis tools for the Linux kernel can also be built on top of KEDR framework.
| Tags | Linux Kernel Debugging Memory Issues Tracing kernel module driver runtime fault injection call interception fault simulation |
|---|---|
| Licenses | GPLv2 |
| Operating Systems | Linux |
| Implementation | C C++ cmake shell script |
| Translations | English |
Last announcement
KEDR at Google Code 16 Dec 2011
When the rumors started that BerliOS Developer could close in 2012, I created a project for KEDR at GoogleCode. Here it is:
http://code.google.com...
Recent releases
- 26 Feb 2013 12:24
Release Notes: The most significant enhancement in this version is support for Linux kernel versions 3.7 and 3.8. Several bugs were fixed.
- 27 Sep 2012 21:17
Release Notes: This release works on kernel versions 3.3-3.6 too. LeakCheck has been redesigned: the analysis engine has been separated from data collection. The API it provides allows you to use the memory leak detector in more cases than before. Handling of the information about signatures of the processed functions has been revisited. 12 more functions that allocate or deallocate memory are now processed, as are the functions kfree_rcu() expands to. Many fixes have been made in LeakCheck, fault simulation, and other subsystems.
- 17 Jun 2011 11:53
Release Notes: Handling of intercepted function calls has been revisited to allow doing several kinds of analysis at the same time. The components responsible for fault simulation are now decoupled from call monitoring facilities. Several enhancements and fixes have been applied to the trace capturing utility. The stack trace-related API has been revisited and simplified. Handling of allocations and frees in the memory leak detector is now deferred via a work queue. This allows you to significantly reduce the time spent with locks held.
- 13 Apr 2011 15:34
Release Notes: The build system was enhanced. It now allows building KEDR for a kernel different from the one running on the build machine. It is also possible to build KEDR for a different system (e.g. for Chromium OS, x86-generic).
- 02 Mar 2011 16:42
Release Notes: The tracing subsystem has been completely rewritten. A memory leak detector has been implemented. It is now possible to restrict fault simulation to particular areas in the target module. Several fixes have been made for KEDR to be able to work on the versions 2.6.37 and 2.6.38 of the Linux kernel. Call monitoring for 20 more functions is now supported. Support for fault simulation for many of these functions as well as for vmalloc() group has also been provided. The issues concerning parallel builds (make -j N) have been fixed.
euspectre
09 Jan 2011 22:27
Heartbeat
- Popularity Score
- 133.18
- Vitality Score
- 7.17
- Subscriptions
- 7
