Hello Aravinda, On Mon, 04 Feb 2013 12:39:31 +0530 Aravinda Prasad <aravinda at linux.vnet.ibm.com> wrote: > makedumpfile security key filtering enhancement - Add Eppic language > support (formerly known as SIAL) to specify rules to scrub data in a > dumpfile. Eppic was previously part of crash source code repository. > > The following series of patches enhance the makedumpfile to provide > a more powerful way to specify rules and commands to traverse and > erase complex data structures in a dump file by integrating Embeddable > Pre-Processor and Interpreter for C (eppic). > > Eppic is an interpreter that facilitates access to the symbol and type > information stored in an executable image or a dump file. Eppic defines > a language semantic which is similar to C. Eppic macros can be used to > specify rules/commands to erase data in an image file. makedumpfile > will interpret the rules/commands provided by eppic macros with the > help of eppic library and will suitably erase the required data in a > dump file. Eppic provides a lot of language constructs like conditional > statements, logical and arithmetic operators, nested loops, functions, > etc., to traverse nested lists and trees and conditionally erase data > in the dump file, enabling users to literally erase any data in the > dump file which is accessible through global symbols. > > The series of patches integrates eppic with makdumpfile. These patches > require eppic library libeppic.a and eppic_api.h header file. The > libeppic.a library can be built from the eppic source code available > at the following URL: > > http://code.google.com/p/eppic/ > > TODO: > > - Currently, works only for symbols in vmlinux, extend it to module > symbols > - Functionality support: > - Implement the following callback functions. > - apialignment > - apigetenum > - apigetdefs > - Other functionalities specified in the code with TODO tag > - Support specifying eppic macros in makedumpfile.conf file > - Update erase info > > Changelog from v3 to v4: > > - Incorporated review comments from Atsushi > - Removed obsolete symbol _init(). > - Changed to explicit initialization of dlopen library > - Added missing -ltinfo in Makefile > - Additional 8th patch, a hack to workaround the limitation when > makedumpfile is compiled with "-static" flag > - Additional 9th patch which includes man page updates Good, I'll merge v4 patches into the next version with small addition to README. Thanks for all your hard work ! Thanks Atsushi Kumagai > Changelog from v2 to v3: > - Re-based to v1.5.1 > - Removed EPPIC=on option from Makefile. > - Dynamically loads eppic shared object instead of statically linking > - Based on the discussion in the mailing list > - http://lists.infradead.org/pipermail/kexec/2012-December/007450.html > - Only patches 1 and 2 are modified > > Changelog from v1 to v2: > > - Re-based to v1.5.0 > - Introduced EPPIC=on in makefile, and hence eppic is now optional > - Incorporated review comments from Atsushi > - Minor formatting changes > > Regards, > Aravinda > --- > > Aravinda Prasad (9): > Initialize and setup eppic > makedumpfile and eppic interface layer > Eppic call back functions to query a dump image > Implement apigetctype call back function > Implement apimember and apigetrtype call back functions > Extend eppic built-in functions to include memset function > Support fully typed symbol access mode > Hack for the limitation when compiled with -static > Update Documentation > > > Makefile | 5 - > dwarf_info.c | 367 +++++++++++++++++++++++++++++++++++++++++++ > dwarf_info.h | 18 ++ > erase_info.c | 116 +++++++++++++- > erase_info.h | 17 ++ > extension_eppic.c | 452 +++++++++++++++++++++++++++++++++++++++++++++++++++++ > extension_eppic.h | 95 +++++++++++ > makedumpfile.8 | 18 ++ > makedumpfile.c | 7 + > makedumpfile.h | 6 + > print_info.c | 13 +- > 11 files changed, 1105 insertions(+), 9 deletions(-) > create mode 100644 extension_eppic.c > create mode 100644 extension_eppic.h > > -- > Aravinda Prasad >
