Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

I am encountering issues during a memory probe with the following details #265

Open
Roma10boss opened this issue Nov 12, 2023 · 5 comments

Comments

@Roma10boss
Copy link

Memory Map:
START END #PAGES
0000000000000000 - 000000000009ffff 000000a0
00000000000c0000 - 00000000dfffffff 000dff40
00000000fb000000 - 00000000fba68fff 00000a69

Current Action: Probing Memory
Access Mode: Normal
Progress: 33267 / 33267 (100%)
Speed: 67 MB/s
Address: 0x000000081F380000
Pages read: 920137 / 8516480 (10%)
Pages failed: 7596343 (89%)
Memory Probe: Completed.

I'm unsure about the significance of the high failure rate, I would appreciate any guidance on resolving this issue. If there are specific steps I can take or additional information needed, please let me know. Thank you for your help.

@ufrisk
Copy link
Owner

ufrisk commented Nov 13, 2023

Try to avoid the probe command if possible. Probe is unfortunately super aggressive and if you're on AMD things are guaranteed to stop working until you reboot.

You can check if DMA is working with pcileech.exe display -min 0x1000 -device fpga -v

If wanting to dump memory on AMD use a memory map, either you can try -memmap auto or you can create your own memory map for your targeted system (best way to do it).

More info at: https://github.com/ufrisk/LeechCore/wiki/Device_FPGA_AMD_Thunderbolt

@serkonda7
Copy link

@ufrisk could you please add this disclaimer regarding aggressive probe to the readme.

@ufrisk
Copy link
Owner

ufrisk commented Nov 14, 2023

Thanks for the suggestion. I'll add a warning about it since it's not the first time I get this question. I'll add it probably on Thursday since I'll update some cached offsets in info.db after this months patch Tuesday anyway then. It will look like the below image.

image

@serkonda7
Copy link

Awesome! Thank you very much

@FocuzJS
Copy link

FocuzJS commented Nov 14, 2023

This doesn't effect 3xxx and newer AMD CPUs, it's mainly the 2xxx generation I've seen with the bridge disabling bus mastering in firmware on a bad map call 😃

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants