rr-debugger/rr
Rr
rr is a deterministic record and replay framework and reverse debugger for Linux processes. It provides a deterministic execution environment that captures program execution, allowing bugs and crashes to be reproduced exactly through replay.
The tool enables reverse program execution, allowing a developer to move the program counter backward through recorded history to trace a bug from its effect back to its source. It utilizes a recording mechanism that ensures a process run can be replayed with identical memory and register states.
The framework covers low-level software analysis and native application debugging. It supports the use of data breakpoints to monitor memory locations during replay and identifies the root causes of memory corruption and timing issues.
A containerized build process is provided for consistent compilation of the tool, including support for Android tool compilation.
Features
- Execution State Recording - Captures a process run into a recording for deterministic replay to reproduce bugs and crashes exactly.
- Deterministic Record and Replay Frameworks - Implements a system that captures program execution to allow exact reproduction of bugs and crashes through deterministic replay.
- Time-Travel Debuggers - Allows the debugger to move the program counter backward through recorded history to trace bugs from effect to source.
- State Snapshotting - Captures full CPU and memory states at periodic intervals to enable fast seeking during reverse execution.
- System Call Interceptors - Intercepts interactions between the application and the kernel to ensure identical environment responses during replay.
- Low-Level Debuggers - Inspects memory and program state changes over time using data breakpoints and reverse execution to find root causes.
- Memory State Restoration - Loads saved memory images into the process address space to recreate specific points in program history.
- Native Application Debugging - Analyzes complex memory corruption and timing issues in native applications by recording and replaying process runs.
- Execution Replay - Provides a mechanism to reproduce process runs by forcing the CPU to follow a recorded sequence of events.
- Deterministic Execution Environments - Provides a recording mechanism that ensures a process run can be replayed with identical memory and register states.
- Execution Tracers - Records system calls and process state to enable stepping backward through application history.
- Reverse Execution Simulation - Simulates backward movement by restoring the most recent snapshot and replaying forward to a target instruction.
- Non-Deterministic Event Logging - Records system call results and interrupts to a log for deterministic playback during the replay phase.
- Memory Access Breakpoints - Monitors specific memory locations during replay and halts execution when data changes to identify where a value was modified.
- Crash Reproduction - Captures program execution and replays it exactly to reproduce elusive bugs and crashes every time.
- Command Line Tools - Listed in the “Command Line Tools” section of the The Book Of Secret Knowledge awesome list.
