Hi,

just spent last 2-3 days in implementing a python server inside gdb, with some external views that can be started in different terminals (register, stack etc.). And accidentally bumped into this project! Briliant!!!!

just that... did not manage to make it working... got the error above.

default python is the same version for gdb and the one found in path (both are 3.4)

thanks in advance for your help

I build the latest Voltron from GitHub and install in Windows following the instructions at https://github.com/snare/voltron/wiki/Installation#windbg and receive the following error in my WinDbg Command log:

0:000> .load pykd 0:000> !py --global C:\Python27\Lib\site-packages\voltron-0.1.5-py2.7.egg\voltron\entry.py C:\Python27\lib\site-packages\blessed\terminal.py:32: UserWarning: One or more of the modules: 'termios', 'fcntl', and 'tty' are not found on your platform 'win32'. The following methods of Terminal are dummy/no-op unless a deriving class overrides them: setraw, cbreak, kbhit, height, width warnings.warn(_MSG_NOSUPPORT) An error occurred while loading Voltron:

Traceback (most recent call last): File "C:\Python27\Lib\site-packages\voltron-0.1.5-py2.7.egg\voltron\entry.py", line 98, in voltron.debugger = plugin.adaptor_class(*args) AttributeError: 'NoneType' object has no attribute 'adaptor_class'

I have issues (Ubu 14.04, lldb 3.7) with voltron views recognizing architecture types. I tried compiling from both clang and gcc.

file reports: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.24, BuildID[sha1]=, not stripped

I am thinking about just modifying register.py to implicitly set an architecture - I could submit a pull request if there's no resources to support this. I realize this is more a feature request than a bug. It looks like we could possibly just add an argument to configure_subparser and then I would have to spend a few minutes digging into where targets sets it to propagate properly. Shouldn't be too difficult. Let me know if you think i should just do it and submit a pull request.

Regards,

-- q

arm-none-eabi-gdb v 7.4.50. Inferior started by running source /..../voltron.py as the very first thing I do::

source /usr/local/lib/python2.7/dist-packages/voltron/entry.py set pagination off layout src fs cmd target remote localhost:2331 monitor flash device = LPC1763 monitor speed adaptive monitor reset

Installed the latest version of Voltron through pip. (you probably want to rename voltron to voltron-X.Y)

This from "voltron view break"

Traceback (most recent call last): File "/usr/local/lib/python2.7/dist-packages/voltron/view.py", line 252, in run msg = e.message.args[1].strerror IndexError: tuple index out of range

Error: HTTPConnectionPool(host='localhost', port=5555): Max retries exceeded with url: /api/request (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7ffff1fca390>: Failed to establish a new connection: [Errno 111] Connection >

Really trying to get this to work on a 32-bit Ubuntu 12.04 LTS VM. I can get everything installed/compiled/etc. "Voltron loaded" appears in a glowing red when I fire up GDB, my .gdbinit has the source and init lines but I have two issues:

 Starting program: myFile 9999
 Exception in thread Thread-1:
 Traceback (most recent call last):
 File "/usr/lib/python2.7/threading.py", line 551, in __bootstrap_inner
 self.run()
 File "/usr/local/lib/python2.7/dist-packages/voltron-0.1-py2.7.egg/voltron/core.py", line 193, in run
 rfds, _, _ = select.select([serv, self.exit_pipe] + self.clients, [], [])
 error: (4, 'Interrupted system call')'

and then in my second terminal, when trying to start a view, I get:

 Error connecting to server: Connection refused

Thanks for any guidance you can provide.

An idea I was playing with was cdb support for Voltron.

cdb is the console based windbg, and as windbg can load python addons I thought Voltron might be a great addition.

I have been thinking for over a month to implement this myself, although it seems I don't have enough spare time to get started with it. Decided to dump the idea here so everybody can comment on the idea and or implement it.

Hello! I've been trying to get this set up for a while, maybe you can tell me what I am doing wrong. I get this error when using setup.py install....

error: Could not find suitable distribution for Requirement.parse('yaml')

Any Ideas?

Hey, me again. gdb 7.4.1-debian is giving me this error:

Exception <type 'exceptions.ImportError'> raised while loading Voltron: No module named blessed
/home/admin/.gdbinit:2: Error in sourced command file:
Undefined command: "voltron".  Try "help".

I'm assuming this is from the 'import blessed' line in dbgentry.py. Any ideas?

Sorry I'm treating this as a forum since there's no official forum for voltron. Cheers

[email protected]:~$ gdb -q
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/voltron-0.1-py2.7.egg/dbgentry.py", line 1, in <module>
    import voltron
ImportError: No module named 'voltron'
/home/user/.gdbinit:2: Error in sourced command file:
Undefined command: "voltron".  Try "help".
(gdb) 

[email protected]:~$ cat .gdbinit 
source /usr/local/lib/python2.7/dist-packages/voltron-0.1-py2.7.egg/dbgentry.py
voltron start

[email protected]:~$ which voltron 
/usr/local/bin/voltron

[email protected]:~$ python
Python 2.7.6 (default, Mar 22 2014, 22:59:56) 
[GCC 4.8.2] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import voltron
>>> voltron.__file__
'/usr/local/lib/python2.7/dist-packages/voltron-0.1-py2.7.egg/voltron/__init__.pyc'

os: Ubuntu 15.04 gdb: GNU gdb (Ubuntu 7.9-1ubuntu1) 7.9 elf file is https://github.com/ctfs/write-ups-2015/tree/master/defcon-qualifier-ctf-2015/reverse/pr0dk3y

i do load the file with gdb: gdb ./pr0dk3y_40687b492c80205cccb34db1eabf6456 bp *0 to break as soon as it executes then info file, bpd 1 and bp *entry_point (this is to break on entry point since the elf has PIE)

it will break and seems to work but as soon as i single step one or at most two instructions (either si/ni) gdb will segfault:

0x0000555555554a65 in ?? ()
/build/buildd/gdb-7.9/gdb/common/cleanups.c:265: internal-warning: restore_my_cleanups has found a stale cleanup
A problem internal to GDB has been detected,
further debugging may prove unreliable.

This is a bug, please report it.  For instructions, see:
<http://www.gnu.org/software/gdb/bugs/>.

[1]    5903 abort (core dumped)  gdb pr0dk3y_40687b492c80205cccb34db1eabf6456

or:

Traceback (most recent call last):
  File "/usr/local/lib/python3.4/dist-packages/voltron-0.1-py3.4.egg/voltron/core.py", line 215, in run
    rfds, _, _ = select.select([serv, self.exit_pipe] + self.clients, [], [])
InterruptedError: [Errno 4] Chiamata di sistema interrotta

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3.4/threading.py", line 920, in _bootstrap_inner
    self.run()
  File "/usr/local/lib/python3.4/dist-packages/voltron-0.1-py3.4.egg/voltron/core.py", line 218, in run
    if ex[0] == errno.EINTR: # interrupted system call
TypeError: 'InterruptedError' object is not subscriptable


0x0000555555554a84 in ?? ()

here is my gdb-init:

source ~/coding_home/reversing/voltron/dbgentry.py                                                                                                                                                                                         
voltron init                                                                                                                                                                                                                               

#source ~/.fg_gdbinit

i did both import and remove https://github.com/gdbinit/Gdbinit but still keeps on crashing.

Thanks for this really cool toolkit.

I'm just experimenting with lldb+macos and I can't seem to get the views to update automatically. I start my executable, voltron indicates it loaded fine. I start a view in another window and it shows me expected output for the the given debugee. However, as I step through the code, the views do not update until I send a to the window with the view (press the return key). Is this some sort of configuration that I can change or possibly something odd about my environment?

I typically use tmux+iTerm for my shells and I've tried both with and without tmux just to eliminate that as a possible cause. I've also using the standard Terminal app in macos. All exhibit the same behavior.

lldb version is:

lldb-1000.11.37.1 Swift-4.2

and system python is 2.7.10.

I DO have homebrew installed (including its python versions), but I've tried to be careful not to load homebrew stuff from lldb/voltron.

any advice appreciated.

An error occurred while loading Voltron:

Traceback (most recent call last): File "/users/anksingh/.local/lib/python2.7/site-packages/voltron/entry.py", line 57, in import voltron File "/users/anksingh/.local/lib/python2.7/site-packages/voltron/init.py", line 95, in setup_env() File "/users/anksingh/.local/lib/python2.7/site-packages/voltron/init.py", line 31, in setup_env pkg_plugins=PluginDirectory('plugins', parent=PackageDirectory()) File "/users/anksingh/.local/lib/python2.7/site-packages/scruffy/env.py", line 49, in init self.add(**kwargs) File "/users/anksingh/.local/lib/python2.7/site-packages/scruffy/env.py", line 114, in add self._children[key].prepare() File "/users/anksingh/.local/lib/python2.7/site-packages/scruffy/file.py", line 439, in prepare self.load() File "/users/anksingh/.local/lib/python2.7/site-packages/scruffy/file.py", line 445, in load self._pm.load_plugins(self.path) File "/users/anksingh/.local/lib/python2.7/site-packages/scruffy/plugin.py", line 65, in load_plugins self.load_plugins(filepath) File "/users/anksingh/.local/lib/python2.7/site-packages/scruffy/plugin.py", line 61, in load_plugins mod = imp.load_module(modname, file, path, descr) File "/users/anksingh/.local/lib/python2.7/site-packages/voltron/plugins/debugger/dbg_lldb.py", line 579 log.warning(f"Exception when saving hook index for unregistering. {e}") ^ ---Type to continue, or q to quit--- SyntaxError: invalid syntax

M1 Macs, newer iPhones and any device running on A12 Apple chipset run on a specific arm64e architecture that introduces some new features like PAC or nested virtualizations.

Registers, instructions and basic core ARM components are mostly the same as for arm64, but Voltron does not support arm64e architecture as shown in my issue : https://github.com/snare/voltron/issues/297.

Support for this arm64e architecture is not hard to implement thanks to the similarity of these two architecture versions, so here is my pull request to add this support on LLDB.

It may work with other debuggers but I have only tested it with LLDB.

Hi,

Do you plan to support arm64e (Tested for Mac OS 12.3.1 Kernel) architecture in near future? Or is it already supported someway and the tool needs only a tweak to handle it?

Thank you.

I'm trying to remote debug MacOS kernel with LLDB. I have Voltron and Apple's Kernel Debug Kit installed.

In LLDB, first I create the target:

target create /Library/Developer/KDKs/KDK_11.6.5_20G527.kdk/System/Library/Kernels/kernel

After that, once I set it to load scripts:

settings set target.load-script-from-symbol-file true

Then, it crashes with

error: module importing failed: Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/Library/Developer/KDKs/KDK_11.6.5_20G527.kdk/System/Library/Kernels/kernel.dSYM/Contents/Resources/Python/lldbmacros/xnu.py", line 1286, in <module>
    from misc import *
  File "/Library/Developer/KDKs/KDK_11.6.5_20G527.kdk/System/Library/Kernels/kernel.dSYM/Contents/Resources/Python/lldbmacros/misc.py", line 8, in <module>
    from scheduler import *
  File "/Library/Developer/KDKs/KDK_11.6.5_20G527.kdk/System/Library/Kernels/kernel.dSYM/Contents/Resources/Python/lldbmacros/scheduler.py", line 1035, in <module>
    from kevent import GetKnoteKqueue
  File "/Library/Developer/KDKs/KDK_11.6.5_20G527.kdk/System/Library/Kernels/kernel.dSYM/Contents/Resources/Python/lldbmacros/kevent.py", line 3, in <module>
    from memory import vm_unpack_pointer
ImportError: cannot import name 'vm_unpack_pointer' from 'memory' (/Users/kon/Library/Python/3.8/lib/python/site-packages/voltron/plugins/api/memory.py)

The problem seems to be that a file /Library/Developer/KDKs/KDK_11.6.5_20G527.kdk/System/Library/Kernels/kernel.dSYM/Contents/Resources/Python/lldbmacros/kevent.py tries to import stuff from memory, where the intended file for that is /Library/Developer/KDKs/KDK_11.6.5_20G527.kdk/System/Library/Kernels/kernel.dSYM/Contents/Resources/Python/lldbmacros/memory.py

However, for some reason, it actually accesses Voltron's memory.py: /Users/me/Library/Python/3.8/lib/python/site-packages/voltron/plugins/api/memory.py

I am not very well-versed in Pythons modules and import rules, and especially I don't know how LLDB loads scripts, but to me, this seems like something that is not normally supposed to happen. Is this just unfortunate name clash, or is something broken in my system?

Is there any current way to change color scheme or theme of voltron?

Are there any community themes as of yet?

Are there any docs I can look at for the configuration of Voltron colors? Thanks!