EMBA firmware report

-----------------------------------------------------------------

[*] Initial CPU detection process of binary sshd with CPU configuration .

[*] Emulator used: qemu-mipsel-static

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract (1/2)

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config NONE

[-] Emulation process of binary sshd with CPU configuration  failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config 4Kc

[-] Emulation process of binary sshd with CPU configuration 4Kc failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config 4Km

[-] Emulation process of binary sshd with CPU configuration 4Km failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config 4KEcR1

[-] Emulation process of binary sshd with CPU configuration 4KEcR1 failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config 4KEmR1

[-] Emulation process of binary sshd with CPU configuration 4KEmR1 failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config 4KEc

[-] Emulation process of binary sshd with CPU configuration 4KEc failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config 4KEm

[-] Emulation process of binary sshd with CPU configuration 4KEm failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config 24Kc

[-] Emulation process of binary sshd with CPU configuration 24Kc failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config 24KEc

[-] Emulation process of binary sshd with CPU configuration 24KEc failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config 24Kf

[-] Emulation process of binary sshd with CPU configuration 24Kf failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config 34Kf

[-] Emulation process of binary sshd with CPU configuration 34Kf failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config 74Kf

[-] Emulation process of binary sshd with CPU configuration 74Kf failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config M14K

[-] Emulation process of binary sshd with CPU configuration M14K failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config M14Kc

[-] Emulation process of binary sshd with CPU configuration M14Kc failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config P5600

[-] Emulation process of binary sshd with CPU configuration P5600 failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config mips32r6-generic

[-] Emulation process of binary sshd with CPU configuration mips32r6-generic failed

[*] Trying to emulate binary ./usr/sbin/sshd with cpu config I7200

[-] Emulation process of binary sshd with CPU configuration I7200 failed

-----------------------------------------------------------------

-----------------------------------------------------------------

[*] Initial CPU detection process of binary sshd with CPU configuration 24KEc.

[*] Emulator used: qemu-mipsel-static

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr (2/2)

[*] Trying to emulate binary ./sbin/sshd with cpu config 24KEc

1 brk(NULL) = 0x400feb20

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7c7000

1 uname(0x3ff1d710) = 0

1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/tls/libcrypto.so.1.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d4a4,512) = 512

1 prctl(46,1072813560,1072813220,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d360) = 0

1 mmap2(NULL,2304304,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f594000

1 mprotect(0x3f79a000,61440,PROT_NONE) = 0

1 mmap2(0x3f7a9000,106496,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x205) = 0x3f7a9000

1 mmap2(0x3f7c3000,14640,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f7c3000

1 mprotect(0x3ff1d000,4096,PROT_EXEC|PROT_READ|PROT_WRITE|PROT_GROWSDOWN) = 0

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libutil.so.1",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/libutil.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d494,512) = 512

1 prctl(46,1072813512,1072813204,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1d260,SEEK_SET) = 0

1 read(3,0x3ff1d290,32) = 32

1 fstat64(3,0x3ff1d350) = 0

1 mmap2(NULL,73936,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f581000

1 mprotect(0x3f583000,61440,PROT_NONE) = 0

1 mmap2(0x3f592000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f592000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libz.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d484,512) = 512

1 prctl(46,1072813496,1072813188,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d340) = 0

1 mmap2(NULL,155984,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f55a000

1 mprotect(0x3f56f000,65536,PROT_NONE) = 0

1 mmap2(0x3f57f000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x15) = 0x3f57f000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libcrypt.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d474,512) = 512

1 prctl(46,1072813480,1072813172,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1d240,SEEK_SET) = 0

1 read(3,0x3ff1d270,32) = 32

1 fstat64(3,0x3ff1d330) = 0

1 mmap2(NULL,262716,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f519000

1 mprotect(0x3f522000,61440,PROT_NONE) = 0

1 mmap2(0x3f531000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x8) = 0x3f531000

1 mmap2(0x3f533000,156220,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f533000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d464,512) = 512

1 prctl(46,1072813592,1072813156,512,1065377792,0) = 0

1 _llseek(3,0,760,0x3ff1d238,SEEK_SET) = 0

1 read(3,0x3ff1d268,32) = 32

1 fstat64(3,0x3ff1d320) = 0

1 mmap2(NULL,1593152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f394000

1 mprotect(0x3f501000,61440,PROT_NONE) = 0

1 mmap2(0x3f510000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x16c) = 0x3f510000

1 mmap2(0x3f517000,8000,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f517000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libdl.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d394,512) = 512

1 prctl(46,1072813256,1072812948,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1d168,SEEK_SET) = 0

1 read(3,0x3ff1d198,32) = 32

1 fstat64(3,0x3ff1d250) = 0

1 mmap2(NULL,73968,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f381000

1 mprotect(0x3f383000,61440,PROT_NONE) = 0

1 mmap2(0x3f392000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f392000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d384,512) = 512

1 prctl(46,1072813336,1072812932,512,1065377792,0) = 0

1 _llseek(3,0,768,0x3ff1d150,SEEK_SET) = 0

1 read(3,0x3ff1d180,32) = 32

1 fstat64(3,0x3ff1d240) = 0

1 mmap2(NULL,181248,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f354000

1 mprotect(0x3f36e000,61440,PROT_NONE) = 0

1 mmap2(0x3f37d000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3f37d000

1 mmap2(0x3f37f000,5120,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f37f000

1 close(3) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f352000

1 set_thread_area(0x3f359fa0) = 0

1 mprotect(0x3f510000,16384,PROT_READ) = 0

1 mprotect(0x3f37d000,4096,PROT_READ) = 0

1 mprotect(0x3f392000,4096,PROT_READ) = 0

1 mprotect(0x3f531000,4096,PROT_READ) = 0

1 mprotect(0x3f57f000,4096,PROT_READ) = 0

1 mprotect(0x3f592000,4096,PROT_READ) = 0

1 mprotect(0x3f7a9000,90112,PROT_READ) = 0

1 mprotect(0x400f8000,8192,PROT_READ) = 0

1 mprotect(0x3f7fd000,4096,PROT_READ) = 0

1 set_tid_address(0x3f352b78) = 1

1 set_robust_list(0x3f352b80,12) = -1 errno=89 (Function not implemented)

1 rt_sigaction(32,0x3ff1dd60,NULL) = 0

1 rt_sigaction(33,0x3ff1dd60,NULL) = 0

1 rt_sigprocmask(SIG_UNBLOCK,0x3ff1dda8,NULL,16) = 0

1 getrlimit(3,0x3ff1de30) = 0

1 brk(NULL) = 0x400feb20

1 brk(0x4011fb20) = 0x4011fb20

1 brk(0x40120000) = 0x40120000

1 brk(0x40141000) = 0x40141000

1 brk(0x40162000) = 0x40162000

1 brk(0x40183000) = 0x40183000

1 brk(0x401ac000) = 0x401ac000

1 brk(0x401cd000) = 0x401cd000

1 brk(0x401ef000) = 0x401ef000

1 geteuid() = 0

1 setgroups(0,(nil)) = 0

1 openat(AT_FDCWD,"/dev/null",O_RDWR|O_LARGEFILE) = 3

1 close(3) = 0

1 futex(0x3f7c535c,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f386020,1060659232) = 0

1 futex(0x3f7c5350,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f386020,1060659232) = 0

1 futex(0x3f7c5348,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f386020,1060659232) = 0

1 futex(0x3f7c53e8,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f386020,1060659232) = 0

1 futex(0x3f7c5338,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f386020,1060659232) = 0

1 futex(0x3f7c5330,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f386020,1060659232) = 0

1 futex(0x3f7c5450,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f386020,1060659232) = 0

1 getpid() = 1

1 getrandom(0x401e4a90,32,0) = 32

1 getpid() = 1

1 clock_gettime(CLOCK_REALTIME,0x3ff1d558) = 0 ({tv_sec = 1689943322,tv_nsec = 74920775})

1 time(0,0,1075726240,1064652032,0,0) = 1689943322

1 futex(0x3f7c5428,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f386020,1060659232) = 0

1 getpid() = 1

1 getpid() = 1

1 getpid() = 1

1 time(0,0,48,0,0,0) = 1689943322

1 time(0,0,1075727936,1064652032,0,0) = 1689943322

1 getpid() = 1

1 clock_gettime(CLOCK_BOOTTIME,0x3ff1d490) = 0 ({tv_sec = 146649,tv_nsec = 406393394})

1 getpid() = 1

1 time(0,0,40,0,0,0) = 1689943322

1 write(2,0x3ff1c9d4,55)sshd re-exec requires execution with an absolute path

 = 55

1 exit_group(255)

[+] CPU configuration used for sshd: 24KEc

CPU_CONFIG_det\KEc

-----------------------------------------------------------------