summary refs log tree commit diff stats
path: root/results/scraper/launchpad-without-comments/661696
diff options
context:
space:
mode:
authorChristian Krinitsin <mail@krinitsin.com>2025-06-30 12:24:58 +0000
committerChristian Krinitsin <mail@krinitsin.com>2025-06-30 12:27:06 +0000
commit33606b41d35115f887ea688b1a16f2ff85bf2fe4 (patch)
tree406b2c7b19a087ba437c68f3dbf0b589fa1d6150 /results/scraper/launchpad-without-comments/661696
parentadedf8771bc4de3113041ca21bd4d0d1c0014b6a (diff)
downloadqemu-analysis-33606b41d35115f887ea688b1a16f2ff85bf2fe4.tar.gz
qemu-analysis-33606b41d35115f887ea688b1a16f2ff85bf2fe4.zip
add launchpad bug reports without comments
Diffstat (limited to 'results/scraper/launchpad-without-comments/661696')
-rw-r--r--results/scraper/launchpad-without-comments/66169628
1 files changed, 28 insertions, 0 deletions
diff --git a/results/scraper/launchpad-without-comments/661696 b/results/scraper/launchpad-without-comments/661696
new file mode 100644
index 000000000..4ad507806
--- /dev/null
+++ b/results/scraper/launchpad-without-comments/661696
@@ -0,0 +1,28 @@
+incomplete emulation of fstenv under TCG
+
+Steps to reproduce:
+
+1) Install Windows (tried XP and 7) in qemu (tried qemu without kvm and qemu-kvm).
+
+2) Get OllyDbg ( http://ollydbg.de/odbg200.zip ).
+
+3) Use some Metasploit-encoded file, example included.
+
+It is not a virus!
+
+File was generated with Metasploit, command (if i remember it right): `msfpayload windows/exec cmd=notepad R | msfencode -e x86/shikata_ga_nai -t exe -o cmd_exec_notepad.shikata_ga_nai.exe`.
+
+4) Launch the file under Windows in qemu, make sure it opens a notepad.
+
+5) Open file under OllyDbg, run (F9) it there. It opens a notpad. Close OllyDbg.
+
+6) Open file under OllyDbg, trace over (Ctrl+F12) it there. It fails with `Access violation when writing to [some address]`.
+Command: 316A 13, XOR DWORD PTR DS:[EDX+13],EBP 
+
+Under native Windows, the trace over command works fine.
+
+Under VMware the trace works fine.
+Under VirtualBox it also fails (checked in the spring).
+
+$ qemu-kvm --version
+QEMU PC emulator version 0.12.5 (qemu-kvm-0.12.5), Copyright (c) 2003-2008 Fabrice Bellard
\ No newline at end of file