Class: VirtualMachine

Inherits:
Object
  • Object
show all
Defined in:
lib/virtualmachine.rb,
ext/virtualmachine/virtualmachine.c

Instance Method Summary collapse

Constructor Details

#initialize(vmname, memsize) ⇒ Object



170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
# File 'ext/virtualmachine/virtualmachine.c', line 170

VALUE virtualmachine_initialize(VALUE self, VALUE vmname, VALUE memsize)
{
	VALUE vctx;
	struct vmctx *ctx;
	uint64_t *gdt, *pt4, *pt3, *pt2;
	int i, err;

	_vm_create(StringValuePtr(vmname));
	ctx = _vm_open(StringValuePtr(vmname));
	vctx = Data_Wrap_Struct(rb_cVMCtx, NULL, vmctx_free, ctx);
	rb_iv_set(self, "@ctx", vctx);
	rb_iv_set(self, "@vmname", vmname);
	rb_iv_set(self, "@memsize", memsize);
	_vm_setup_memory(ctx, FIX2INT(memsize) * MB, VM_MMAP_ALL);

	pt4 = _vm_map_gpa(ctx, ADDR_PT4, sizeof(uint64_t) * 512);
	pt3 = _vm_map_gpa(ctx, ADDR_PT3, sizeof(uint64_t) * 512);
	pt2 = _vm_map_gpa(ctx, ADDR_PT2, sizeof(uint64_t) * 512);
	gdt = _vm_map_gpa(ctx, ADDR_GDT, sizeof(uint64_t) * 3);

	bzero(pt4, PAGE_SIZE);
	bzero(pt3, PAGE_SIZE);
	bzero(pt2, PAGE_SIZE);

	for (i = 0; i < 512; i++) {
		pt4[i] = (uint64_t)ADDR_PT3;
		pt4[i] |= PG_V | PG_RW | PG_U;
		pt3[i] = (uint64_t)ADDR_PT2;
		pt3[i] |= PG_V | PG_RW | PG_U;
		pt2[i] = i * (2 * 1024 * 1024);
		pt2[i] |= PG_V | PG_RW | PG_PS | PG_U;
	}

	gdt[GUEST_NULL_SEL] = 0;
	gdt[GUEST_CODE_SEL] = 0x0020980000000000;
	gdt[GUEST_DATA_SEL] = 0x0000900000000000;

	_vm_set_desc(ctx, 0, VM_REG_GUEST_CS, 0, 0, 0x0000209B);
	_vm_set_desc(ctx, 0, VM_REG_GUEST_DS, 0, 0, 0x00000093);
	_vm_set_desc(ctx, 0, VM_REG_GUEST_ES, 0, 0, 0x00000093);
	_vm_set_desc(ctx, 0, VM_REG_GUEST_FS, 0, 0, 0x00000093);
	_vm_set_desc(ctx, 0, VM_REG_GUEST_GS, 0, 0, 0x00000093);
	_vm_set_desc(ctx, 0, VM_REG_GUEST_SS, 0, 0, 0x00000093);
	_vm_set_desc(ctx, 0, VM_REG_GUEST_TR, 0, 0, 0x0000008b);
	_vm_set_desc(ctx, 0, VM_REG_GUEST_LDTR, 0, 0, DESC_UNUSABLE);
	_vm_set_desc(ctx, 0, VM_REG_GUEST_GDTR, ADDR_GDT, GUEST_GDTR_LIMIT, 0);

	_vm_set_register(ctx, 0, VM_REG_GUEST_CS, GSEL(GUEST_CODE_SEL, SEL_KPL));
	_vm_set_register(ctx, 0, VM_REG_GUEST_DS, GSEL(GUEST_DATA_SEL, SEL_KPL));
	_vm_set_register(ctx, 0, VM_REG_GUEST_ES, GSEL(GUEST_DATA_SEL, SEL_KPL));
	_vm_set_register(ctx, 0, VM_REG_GUEST_FS, GSEL(GUEST_DATA_SEL, SEL_KPL));
	_vm_set_register(ctx, 0, VM_REG_GUEST_GS, GSEL(GUEST_DATA_SEL, SEL_KPL));
	_vm_set_register(ctx, 0, VM_REG_GUEST_SS, GSEL(GUEST_DATA_SEL, SEL_KPL));
	_vm_set_register(ctx, 0, VM_REG_GUEST_TR, 0);
	_vm_set_register(ctx, 0, VM_REG_GUEST_LDTR, 0);

	_vm_set_register(ctx, 0, VM_REG_GUEST_CR0, CR0_PG | CR0_PE | CR0_NE);
	_vm_set_register(ctx, 0, VM_REG_GUEST_CR3, ADDR_PT4);
	_vm_set_register(ctx, 0, VM_REG_GUEST_CR4, CR4_PAE | CR4_VMXE);
	_vm_set_register(ctx, 0, VM_REG_GUEST_EFER, EFER_LMA | EFER_LME);
	_vm_set_register(ctx, 0, VM_REG_GUEST_RFLAGS, 0x2);
	_vm_set_register(ctx, 0, VM_REG_GUEST_RSP, ADDR_STACK);

	return self;
}

Instance Method Details

#cr0Object

#cr0=Object

#cr3Object

#cr3=Object

#cr4Object

#cr4=Object

#destroyObject



251
252
253
254
255
256
257
258
259
260
# File 'ext/virtualmachine/virtualmachine.c', line 251

VALUE virtualmachine_destroy(VALUE self)
{
	VALUE vctx = rb_iv_get(self, "@ctx");
	struct vmctx *ctx;
	Data_Get_Struct(vctx, struct vmctx, ctx);
	if (!ctx)
		rb_bug("ctx is null");
	vm_destroy(ctx);
	return Qnil;
}

#dr7Object

#dr7=Object

#eferObject

#efer=Object

#load_asm(program) ⇒ Object



5
6
7
8
# File 'lib/virtualmachine.rb', line 5

def load_asm(program)
	edata = Metasm::Shellcode.assemble(Metasm::X64.new, program).encoded
	load_binary(edata.data)
end

#load_binary(program) ⇒ Object



236
237
238
239
240
241
242
243
244
245
246
247
248
249
# File 'ext/virtualmachine/virtualmachine.c', line 236

VALUE virtualmachine_load_binary(VALUE self, VALUE program)
{
	VALUE vctx = rb_iv_get(self, "@ctx");
	struct vmctx *ctx;
	unsigned char *entry;

	Data_Get_Struct(vctx, struct vmctx, ctx);
	if (!ctx)
		rb_bug("ctx is null");
	entry = _vm_map_gpa(ctx, ADDR_ENTRY, RSTRING_LEN(program));
	memcpy(entry, StringValuePtr(program), RSTRING_LEN(program));
	_vm_set_register(ctx, 0, VM_REG_GUEST_RIP, ADDR_ENTRY);
	return Qnil;
}

#r10Object

#r10=Object

#r11Object

#r11=Object

#r12Object

#r12=Object

#r13Object

#r13=Object

#r14Object

#r14=Object

#r15Object

#r15=Object

#r8Object

#r8=Object

#r9Object

#r9=Object

#raxObject

#rax=Object

#rbpObject

#rbp=Object

#rbxObject

#rbx=Object

#rcxObject

#rcx=Object

#rdiObject

#rdi=Object

#rdxObject

#rdx=Object

#rflagsObject

#rflags=Object

#ripObject

#rip=Object

#rsiObject

#rsi=Object

#rspObject

#rsp=Object

#runObject



10
11
12
# File 'lib/virtualmachine.rb', line 10

def run
	system("/usr/sbin/bhyve -H -c 1 -m #{@memsize} -s 0:0,hostbridge -S 31,uart,stdio -e #{@vmname} 2> /dev/null")
end