diff --git a/README.adoc b/README.adoc index b8f168b..4f2e634 100644 --- a/README.adoc +++ b/README.adoc @@ -3511,6 +3511,23 @@ Patches were merged in post v2.12.0-rc2 but it crashed for me and I opened a min Alternatively, https://github.com/mozilla/rr[`mozilla/rr`] claims it is able to run QEMU: but using it would require you to step through QEMU code itself. Likely doable, but do you really want to? +==== QEMU trace multicore + +TODO: is there any way to distinguish which instruction runs on each core? Doing: + +.... +./run -a x86_64 -c 2 -E '/poweroff.out' -T exec_tb +./qemu-trace2txt +.... + +just appears to output both cores intertwined without any clear differentiation. + +==== QEMU trace decode instructions + +TODO: is is possible to show which instructions ran at each point in time, in addition to the address of the instruction with `exec_tb` shows? Hopefully dissembled, not just the instruction memory. + +PANDA can list memory addresses, so I bet it can also decode the instructions: https://github.com/panda-re/panda/blob/883c85fa35f35e84a323ed3d464ff40030f06bd6/panda/docs/LINE_Censorship.md I wonder why they don't just upstream those things to QEMU's tracing. + ==== gem5 tracing gem5 also has a tracing mechanism, as documented at: http://www.gem5.org/Trace_Based_Debugging