Skip to content

Commit

Permalink
Systrack v0.5
Browse files Browse the repository at this point in the history
  • Loading branch information
mebeim committed May 27, 2024
1 parent 9a80684 commit dd3665a
Show file tree
Hide file tree
Showing 2 changed files with 32 additions and 1 deletion.
31 changes: 31 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,37 @@
Systrack changelog
==================

v0.5
----

We tried so hard, and got so far, but in the end, we need a disassembler! x86
mitigations have defeated us, we no longer have syscall tables to rely on.
Kernel developers were kind enough to write very simple ABI-specific
switch-based handlers to dispach syscalls, so analysis is still possible... just
significantly more complicated.

**Breaking changes**:

- Drop support for Python 3.6 and 3.7. Systrack now requires Python 3.8+. This
is because of the new dependency on
[`iced-x86`](https://pypi.org/project/iced-x86/).

**Improvements**:

- x86: support new kernels (6.9+) with no syscall tables.
- Remove unnecessary spaces between asterisks for double pointers in function
signatures.
- Avoid KFCI `__{cfi,pfx}_` symbols when looking for `ni_syscall` symbols.

**Internal changes**:

- Depend on [`iced-x86`](https://pypi.org/project/iced-x86/) for disassembling
x86 instructions and on [`jinja2`](https://pypi.org/project/jinja2/) for HTML
output directly. Remove optional dependencies and only build one package.
- Rename `test` folder to `tests` to use the `hatch test` as test commnad
- Improve logging reproducibility by sorting more debugging log output.
- Improve broken Python package metadata (Python packaging moment).

v0.4
----

Expand Down
2 changes: 1 addition & 1 deletion src/systrack/version.py
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
VERSION = '0.5-rc1'
VERSION = '0.5'
VERSION_COPY = '''\
Copyright (C) 2023-2024 Marco Bonelli
Licensed under the GNU General Public License v3.0
Expand Down

0 comments on commit dd3665a

Please sign in to comment.