1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
|
loaded ta_22-0-0-77_7c426e7f.bin, session slot 0, cmd_buf PA 0x8200000 len 0x8000
residue set: TA blocks=248 faults=0
=== snapshot at 0x402938 : sp=0x41bf70 ctx=0x41d030 (machine FROZEN before teardown) ===
freeze OK: translate(sp)=0x4257f70
DACR=0x00005401 -> accessible domains [0, 5, 6, 7]
--realwrites: stack paint capped at 0x41bfa5 (measured writable boundary)
attacker-writable regions (user-RW AND DACR-permitted in the TA's own TTBR0):
0x00407000-0x00417000 dom=6 magic prefix 0x50 (paint from 0x40707f)
0x00418000-0x0041bfa5 dom=6 magic prefix 0x51 (paint from 0x41807f)
0x0041d000-0x00421000 dom=6 magic prefix 0x52 (paint from 0x41d07f)
0x00422000-0x00423000 dom=6 magic prefix 0x53 (paint from 0x42207f)
0x04000000-0x04001000 dom=5 magic prefix 0x54 (paint from 0x400007f)
0x04002000-0x04003000 dom=5 magic prefix 0x55 (paint from 0x400207f)
painted 27 pages; pinned 3 uncontrollable words
vector base 0x0, abort hooks armed
HW-measured residue applied to 24/24 slots
=== POSITIVE CONTROLS (predicted outcomes) ===
0x00402425 DATA insn=0x40483a ctrl_regs=['r1', 'r4', 'r5', 'r6']
expected: add sp,#0x28 ; pop.w{..pc} -> pc from *(sp+0x44), PAINTED => PC_CONTROL
vec=0x10 lr_abt=0x404842 sp_usr=0x41bfb8
0x0040371d PREFETCH fetch=0x0 sp=0x41d054
expected: mov sp,r4 ; pop.w{..pc} -> pc from *(ctx+0x20), BELOW carve floor => not ctrl
vec=0xc lr_abt=0x4 sp_usr=0x41d054
0x0040157b DATA insn=0x40157a ctrl_regs=[]
expected: str r0,[r1] with r1=0 -> data abort at 0
vec=0x10 lr_abt=0x401582 sp_usr=0x41bf70
=== SWEEP: 24384 candidates, cap 50000 insns ===
.. 250/24384 0s 2268.5/s eta 11s hits=0 {'DATA': 243, 'PREFETCH': 7, 'SVC': 1}
.. 500/24384 0s 2391.9/s eta 10s hits=0 {'DATA': 491, 'PREFETCH': 9, 'SVC': 1}
.. 750/24384 0s 2504.3/s eta 9s hits=0 {'DATA': 739, 'PREFETCH': 11, 'SVC': 1}
.. 1000/24384 0s 2861.9/s eta 8s hits=0 {'DATA': 985, 'PREFETCH': 15, 'SVC': 1}
.. 1250/24384 0s 2685.1/s eta 9s hits=0 {'DATA': 1015, 'SVC': 185, 'PREFETCH': 51}
.. 1500/24384 1s 2646.9/s eta 9s hits=0 {'DATA': 1015, 'SVC': 400, 'PREFETCH': 86}
.. 1750/24384 1s 2582.8/s eta 9s hits=0 {'DATA': 1015, 'SVC': 614, 'PREFETCH': 122}
.. 2000/24384 1s 2744.6/s eta 8s hits=0 {'DATA': 1038, 'SVC': 795, 'PREFETCH': 148, 'SP_IN_CTRL': 20}
.. 2250/24384 1s 2913.6/s eta 8s hits=0 {'DATA': 1107, 'SVC': 851, 'PREFETCH': 223, 'SP_IN_CTRL': 38, 'UCERR': 32}
.. 2500/24384 1s 3061.5/s eta 7s hits=0 {'DATA': 1159, 'SVC': 895, 'PREFETCH': 329, 'SP_IN_CTRL': 69, 'UCERR': 49}
.. 2750/24384 1s 3191.1/s eta 7s hits=0 {'DATA': 1263, 'SVC': 916, 'PREFETCH': 420, 'SP_IN_CTRL': 90, 'UCERR': 62}
HIT V=0x0040171b PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf34 (=0x418000+0x3f34) | sp=0x41bf38 (in 0x418000)
.. 3000/24384 1s 3270.7/s eta 7s hits=1 {'DATA': 1331, 'SVC': 933, 'PREFETCH': 560, 'SP_IN_CTRL': 112, 'UCERR': 64}
.. 3250/24384 1s 3297.4/s eta 6s hits=1 {'DATA': 1370, 'SVC': 935, 'PREFETCH': 749, 'SP_IN_CTRL': 117, 'UCERR': 79}
.. 3500/24384 1s 3268.8/s eta 6s hits=1 {'DATA': 1480, 'SVC': 935, 'PREFETCH': 867, 'SP_IN_CTRL': 130, 'UCERR': 88}
.. 3750/24384 1s 3272.9/s eta 6s hits=1 {'DATA': 1544, 'PREFETCH': 1030, 'SVC': 935, 'SP_IN_CTRL': 148, 'UCERR': 93}
.. 4000/24384 1s 3280.9/s eta 6s hits=1 {'DATA': 1592, 'PREFETCH': 1218, 'SVC': 935, 'SP_IN_CTRL': 155, 'UCERR': 100}
.. 4250/24384 1s 3356.9/s eta 6s hits=1 {'DATA': 1769, 'PREFETCH': 1270, 'SVC': 942, 'SP_IN_CTRL': 156, 'UCERR': 113}
.. 4500/24384 1s 3386.2/s eta 6s hits=1 {'DATA': 1838, 'PREFETCH': 1382, 'SVC': 966, 'SP_IN_CTRL': 190, 'UCERR': 124}
.. 4750/24384 1s 3455.8/s eta 6s hits=1 {'DATA': 1949, 'PREFETCH': 1410, 'SVC': 1020, 'SP_IN_CTRL': 217, 'UCERR': 154}
.. 5000/24384 1s 3458.8/s eta 6s hits=1 {'DATA': 2050, 'PREFETCH': 1507, 'SVC': 1030, 'SP_IN_CTRL': 243, 'UCERR': 170}
.. 5250/24384 2s 3489.6/s eta 5s hits=1 {'DATA': 2140, 'PREFETCH': 1609, 'SVC': 1045, 'SP_IN_CTRL': 268, 'UCERR': 188}
.. 5500/24384 2s 3481.7/s eta 5s hits=1 {'DATA': 2259, 'PREFETCH': 1702, 'SVC': 1050, 'SP_IN_CTRL': 285, 'UCERR': 204}
.. 5750/24384 2s 3464.7/s eta 5s hits=1 {'DATA': 2348, 'PREFETCH': 1778, 'SVC': 1091, 'SP_IN_CTRL': 312, 'UCERR': 221}
.. 6000/24384 2s 3474.7/s eta 5s hits=1 {'DATA': 2492, 'PREFETCH': 1831, 'SVC': 1108, 'SP_IN_CTRL': 334, 'UCERR': 235}
.. 6250/24384 2s 3118.6/s eta 6s hits=1 {'DATA': 2638, 'PREFETCH': 1894, 'SVC': 1113, 'SP_IN_CTRL': 356, 'UCERR': 249}
.. 6500/24384 2s 3132.1/s eta 6s hits=1 {'DATA': 2742, 'PREFETCH': 1973, 'SVC': 1149, 'SP_IN_CTRL': 371, 'UCERR': 265}
.. 6750/24384 2s 3176.0/s eta 6s hits=1 {'DATA': 2871, 'PREFETCH': 2021, 'SVC': 1192, 'SP_IN_CTRL': 386, 'UCERR': 280}
.. 7000/24384 2s 3224.7/s eta 5s hits=1 {'DATA': 3047, 'PREFETCH': 2047, 'SVC': 1216, 'SP_IN_CTRL': 399, 'UCERR': 291}
.. 7250/24384 2s 3258.3/s eta 5s hits=1 {'DATA': 3157, 'PREFETCH': 2082, 'SVC': 1243, 'SP_IN_CTRL': 454, 'UCERR': 314}
.. 7500/24384 2s 3286.2/s eta 5s hits=1 {'DATA': 3234, 'PREFETCH': 2141, 'SVC': 1307, 'SP_IN_CTRL': 481, 'UCERR': 337}
.. 7750/24384 2s 3287.5/s eta 5s hits=1 {'DATA': 3339, 'PREFETCH': 2209, 'SVC': 1308, 'SP_IN_CTRL': 535, 'UCERR': 359}
.. 8000/24384 2s 3305.0/s eta 5s hits=1 {'DATA': 3448, 'PREFETCH': 2259, 'SVC': 1367, 'SP_IN_CTRL': 551, 'UCERR': 375}
.. 8250/24384 2s 3320.1/s eta 5s hits=1 {'DATA': 3525, 'PREFETCH': 2335, 'SVC': 1432, 'SP_IN_CTRL': 572, 'UCERR': 386}
.. 8500/24384 3s 3328.2/s eta 5s hits=1 {'DATA': 3575, 'PREFETCH': 2421, 'SVC': 1447, 'SP_IN_CTRL': 625, 'UCERR': 432}
.. 8750/24384 3s 3308.9/s eta 5s hits=1 {'DATA': 3624, 'PREFETCH': 2580, 'SVC': 1460, 'SP_IN_CTRL': 636, 'UCERR': 450}
.. 9000/24384 3s 3317.5/s eta 5s hits=1 {'DATA': 3761, 'PREFETCH': 2646, 'SVC': 1468, 'SP_IN_CTRL': 657, 'UCERR': 468}
.. 9250/24384 3s 3321.0/s eta 5s hits=1 {'DATA': 3859, 'PREFETCH': 2738, 'SVC': 1496, 'SP_IN_CTRL': 677, 'UCERR': 480}
.. 9500/24384 3s 3325.3/s eta 4s hits=1 {'DATA': 3980, 'PREFETCH': 2809, 'SVC': 1509, 'SP_IN_CTRL': 702, 'UCERR': 500}
HIT V=0x00404d13 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000)
HIT V=0x00404d15 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000)
.. 9750/24384 3s 3331.3/s eta 4s hits=3 {'DATA': 4069, 'PREFETCH': 2889, 'SVC': 1533, 'SP_IN_CTRL': 743, 'UCERR': 514}
HIT V=0x00404d7b PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000)
HIT V=0x00404d7d PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000)
HIT V=0x00404d7f PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000)
.. 10000/24384 3s 3331.5/s eta 4s hits=6 {'DATA': 4171, 'PREFETCH': 2968, 'SVC': 1549, 'SP_IN_CTRL': 779, 'UCERR': 528}
.. 10250/24384 3s 3337.6/s eta 4s hits=6 {'DATA': 4257, 'PREFETCH': 3061, 'SVC': 1580, 'SP_IN_CTRL': 804, 'UCERR': 543}
.. 10500/24384 3s 3357.8/s eta 4s hits=6 {'DATA': 4354, 'PREFETCH': 3107, 'SVC': 1646, 'SP_IN_CTRL': 828, 'UCERR': 560}
.. 10750/24384 3s 3386.1/s eta 4s hits=6 {'DATA': 4435, 'PREFETCH': 3165, 'SVC': 1715, 'SP_IN_CTRL': 854, 'UCERR': 576}
.. 11000/24384 3s 3419.5/s eta 4s hits=6 {'DATA': 4502, 'PREFETCH': 3184, 'SVC': 1834, 'SP_IN_CTRL': 888, 'UCERR': 587}
.. 11250/24384 3s 3437.1/s eta 4s hits=6 {'DATA': 4583, 'PREFETCH': 3238, 'SVC': 1895, 'SP_IN_CTRL': 927, 'UCERR': 602}
.. 11500/24384 3s 3455.3/s eta 4s hits=6 {'DATA': 4603, 'PREFETCH': 3326, 'SVC': 2027, 'SP_IN_CTRL': 927, 'UCERR': 612}
.. 11750/24384 3s 3473.9/s eta 4s hits=6 {'DATA': 4616, 'PREFETCH': 3548, 'SVC': 2035, 'SP_IN_CTRL': 927, 'UCERR': 619}
.. 12000/24384 3s 3501.4/s eta 4s hits=6 {'DATA': 4661, 'PREFETCH': 3623, 'SVC': 2150, 'SP_IN_CTRL': 934, 'UCERR': 627}
.. 12250/24384 3s 3529.9/s eta 3s hits=6 {'DATA': 4661, 'PREFETCH': 3735, 'SVC': 2272, 'SP_IN_CTRL': 934, 'UCERR': 643}
HIT V=0x00406271 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000)
.. 12500/24384 4s 3561.7/s eta 3s hits=7 {'DATA': 4723, 'PREFETCH': 3786, 'SVC': 2384, 'SP_IN_CTRL': 934, 'UCERR': 667}
.. 12750/24384 4s 3586.3/s eta 3s hits=7 {'DATA': 4845, 'PREFETCH': 3820, 'SVC': 2427, 'SP_IN_CTRL': 954, 'UCERR': 698}
.. 13000/24384 4s 3604.8/s eta 3s hits=7 {'DATA': 5078, 'PREFETCH': 3826, 'SVC': 2427, 'SP_IN_CTRL': 954, 'UCERR': 709}
.. 13250/24384 4s 3618.1/s eta 3s hits=7 {'DATA': 5315, 'PREFETCH': 3829, 'SVC': 2427, 'SP_IN_CTRL': 954, 'UCERR': 719}
.. 13500/24384 4s 3635.2/s eta 3s hits=7 {'DATA': 5542, 'PREFETCH': 3840, 'SVC': 2427, 'SP_IN_CTRL': 954, 'UCERR': 731}
.. 13750/24384 4s 3654.5/s eta 3s hits=7 {'DATA': 5772, 'PREFETCH': 3846, 'SVC': 2427, 'SP_IN_CTRL': 954, 'UCERR': 745}
.. 14000/24384 4s 3645.0/s eta 3s hits=7 {'DATA': 5900, 'PREFETCH': 3942, 'SVC': 2427, 'SP_IN_CTRL': 954, 'UCERR': 771}
.. 14250/24384 4s 3647.7/s eta 3s hits=7 {'DATA': 5902, 'PREFETCH': 4150, 'SVC': 2427, 'SP_IN_CTRL': 954, 'UCERR': 811}
.. 14500/24384 4s 3655.3/s eta 3s hits=7 {'DATA': 5902, 'PREFETCH': 4155, 'SVC': 2427, 'UCERR': 1056, 'SP_IN_CTRL': 954}
.. 14750/24384 4s 3676.3/s eta 3s hits=7 {'DATA': 5907, 'PREFETCH': 4168, 'SVC': 2435, 'UCERR': 1280, 'SP_IN_CTRL': 954}
.. 15000/24384 4s 3683.0/s eta 3s hits=7 {'DATA': 5907, 'PREFETCH': 4174, 'SVC': 2435, 'UCERR': 1524, 'SP_IN_CTRL': 954}
.. 15250/24384 4s 3705.9/s eta 2s hits=7 {'DATA': 5912, 'PREFETCH': 4195, 'SVC': 2444, 'UCERR': 1735, 'SP_IN_CTRL': 958}
.. 15500/24384 4s 3732.7/s eta 2s hits=7 {'DATA': 5955, 'PREFETCH': 4230, 'SVC': 2557, 'UCERR': 1794, 'SP_IN_CTRL': 958}
.. 15750/24384 4s 3762.9/s eta 2s hits=7 {'DATA': 6011, 'PREFETCH': 4271, 'SVC': 2569, 'UCERR': 1935, 'SP_IN_CTRL': 958}
.. 16000/24384 4s 3790.4/s eta 2s hits=7 {'DATA': 6062, 'PREFETCH': 4336, 'SVC': 2586, 'UCERR': 2052, 'SP_IN_CTRL': 958}
.. 16250/24384 4s 3817.5/s eta 2s hits=7 {'DATA': 6113, 'PREFETCH': 4395, 'SVC': 2594, 'UCERR': 2184, 'SP_IN_CTRL': 958}
.. 16500/24384 4s 3847.7/s eta 2s hits=7 {'DATA': 6150, 'PREFETCH': 4417, 'SVC': 2621, 'UCERR': 2332, 'SP_IN_CTRL': 974}
.. 16750/24384 4s 3878.0/s eta 2s hits=7 {'DATA': 6189, 'PREFETCH': 4447, 'SVC': 2655, 'UCERR': 2479, 'SP_IN_CTRL': 974}
.. 17000/24384 4s 3908.0/s eta 2s hits=7 {'DATA': 6220, 'PREFETCH': 4469, 'SVC': 2694, 'UCERR': 2637, 'SP_IN_CTRL': 974}
.. 17250/24384 4s 3935.5/s eta 2s hits=7 {'DATA': 6272, 'PREFETCH': 4515, 'UCERR': 2772, 'SVC': 2711, 'SP_IN_CTRL': 974}
.. 17500/24384 4s 3964.8/s eta 2s hits=7 {'DATA': 6311, 'PREFETCH': 4542, 'UCERR': 2935, 'SVC': 2732, 'SP_IN_CTRL': 974}
.. 17750/24384 4s 3994.8/s eta 2s hits=7 {'DATA': 6324, 'PREFETCH': 4595, 'UCERR': 3110, 'SVC': 2741, 'SP_IN_CTRL': 974}
.. 18000/24384 4s 4022.5/s eta 2s hits=7 {'DATA': 6361, 'PREFETCH': 4626, 'UCERR': 3268, 'SVC': 2765, 'SP_IN_CTRL': 974}
.. 18250/24384 5s 4049.0/s eta 2s hits=7 {'DATA': 6402, 'PREFETCH': 4680, 'UCERR': 3401, 'SVC': 2787, 'SP_IN_CTRL': 974}
.. 18500/24384 5s 4074.0/s eta 1s hits=7 {'DATA': 6455, 'PREFETCH': 4726, 'UCERR': 3551, 'SVC': 2788, 'SP_IN_CTRL': 974}
.. 18750/24384 5s 4102.3/s eta 1s hits=7 {'DATA': 6475, 'PREFETCH': 4752, 'UCERR': 3738, 'SVC': 2805, 'SP_IN_CTRL': 974}
.. 19000/24384 5s 4128.9/s eta 1s hits=7 {'DATA': 6521, 'PREFETCH': 4790, 'UCERR': 3888, 'SVC': 2821, 'SP_IN_CTRL': 974}
.. 19250/24384 5s 4154.4/s eta 1s hits=7 {'DATA': 6566, 'PREFETCH': 4835, 'UCERR': 4029, 'SVC': 2840, 'SP_IN_CTRL': 974}
.. 19500/24384 5s 4179.2/s eta 1s hits=7 {'DATA': 6617, 'PREFETCH': 4879, 'UCERR': 4167, 'SVC': 2857, 'SP_IN_CTRL': 974}
.. 19750/24384 5s 4201.0/s eta 1s hits=7 {'DATA': 6644, 'PREFETCH': 4943, 'UCERR': 4303, 'SVC': 2880, 'SP_IN_CTRL': 974}
.. 20000/24384 5s 4224.7/s eta 1s hits=7 {'DATA': 6678, 'PREFETCH': 5009, 'UCERR': 4429, 'SVC': 2903, 'SP_IN_CTRL': 975}
.. 20250/24384 5s 4247.1/s eta 1s hits=7 {'DATA': 6709, 'PREFETCH': 5105, 'UCERR': 4541, 'SVC': 2914, 'SP_IN_CTRL': 975}
.. 20500/24384 5s 4263.0/s eta 1s hits=7 {'DATA': 6728, 'PREFETCH': 5171, 'UCERR': 4668, 'SVC': 2946, 'SP_IN_CTRL': 981}
.. 20750/24384 5s 4285.3/s eta 1s hits=7 {'DATA': 6781, 'PREFETCH': 5203, 'UCERR': 4804, 'SVC': 2975, 'SP_IN_CTRL': 981}
.. 21000/24384 5s 4303.0/s eta 1s hits=7 {'DATA': 6865, 'PREFETCH': 5237, 'UCERR': 4891, 'SVC': 3020, 'SP_IN_CTRL': 981}
.. 21250/24384 5s 4309.1/s eta 1s hits=7 {'DATA': 6928, 'PREFETCH': 5335, 'UCERR': 4967, 'SVC': 3033, 'SP_IN_CTRL': 981}
.. 21500/24384 5s 4310.8/s eta 1s hits=7 {'DATA': 7076, 'PREFETCH': 5429, 'UCERR': 4969, 'SVC': 3038, 'SP_IN_CTRL': 982}
.. 21750/24384 5s 4323.6/s eta 1s hits=7 {'DATA': 7130, 'PREFETCH': 5512, 'UCERR': 5011, 'SVC': 3086, 'SP_IN_CTRL': 1005}
.. 22000/24384 5s 4333.2/s eta 1s hits=7 {'DATA': 7294, 'PREFETCH': 5555, 'UCERR': 5040, 'SVC': 3091, 'SP_IN_CTRL': 1014}
.. 22250/24384 6s 4029.3/s eta 1s hits=7 {'DATA': 7385, 'PREFETCH': 5625, 'UCERR': 5071, 'SVC': 3097, 'SP_IN_CTRL': 1064}
.. 22500/24384 6s 3993.1/s eta 0s hits=7 {'DATA': 7404, 'PREFETCH': 5851, 'UCERR': 5074, 'SVC': 3099, 'SP_IN_CTRL': 1064}
.. 22750/24384 6s 3982.3/s eta 0s hits=7 {'DATA': 7404, 'PREFETCH': 6101, 'UCERR': 5074, 'SVC': 3099, 'SP_IN_CTRL': 1064}
.. 23000/24384 6s 3953.0/s eta 0s hits=7 {'DATA': 7404, 'PREFETCH': 6351, 'UCERR': 5074, 'SVC': 3099, 'SP_IN_CTRL': 1064}
.. 23250/24384 6s 3807.4/s eta 0s hits=7 {'DATA': 7404, 'PREFETCH': 6601, 'UCERR': 5074, 'SVC': 3099, 'SP_IN_CTRL': 1064}
.. 23500/24384 6s 3749.2/s eta 0s hits=7 {'DATA': 7419, 'PREFETCH': 6714, 'UCERR': 5089, 'SVC': 3134, 'SP_IN_CTRL': 1135}
.. 23750/24384 6s 3768.4/s eta 0s hits=7 {'DATA': 7470, 'PREFETCH': 6759, 'UCERR': 5200, 'SVC': 3175, 'SP_IN_CTRL': 1137}
.. 24000/24384 6s 3766.0/s eta 0s hits=7 {'DATA': 7484, 'PREFETCH': 6927, 'UCERR': 5265, 'SVC': 3176, 'SP_IN_CTRL': 1139}
.. 24250/24384 6s 3758.6/s eta 0s hits=7 {'DATA': 7484, 'PREFETCH': 7177, 'UCERR': 5265, 'SVC': 3176, 'SP_IN_CTRL': 1139}
=== outcome histogram ===
DATA 7484 (30.7%)
PREFETCH 7310 (30.0%)
UCERR 5265 (21.6%)
SVC 3176 (13.0%)
SP_IN_CTRL 1139 (4.7%)
PC_CONTROL+SP_IN_CTRL 7 (0.0%)
RAN 3 (0.0%)
=== CONTROL hits: 7 ===
V=0x0040171b PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf34 (=0x418000+0x3f34) | sp=0x41bf38 (in 0x418000)
V=0x00404d13 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000)
V=0x00404d15 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000)
V=0x00404d7b PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000)
V=0x00404d7d PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000)
V=0x00404d7f PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000)
V=0x00406271 PC_CONTROL+SP_IN_CTRL pc<-CTRL 0x41bf9c (=0x418000+0x3f9c) | sp=0x41bfa0 (in 0x418000)
wrote /tmp/sweep_long.json
|
