google/rekall — pull request #31 by KarlVogel (2014-11-01 14:19:51+00:00)
Title: MIPS Support

These patches add support to examine MIPS Linux dumps. In order to create and load a MIPS profile, the latest version of pyelftools will be required, as versions before today didn't have support to parse MIPS dwarf sections.

As test platform, the OpenWRT Malta MIPS target can be build and run on qemu in system emulation. One important note, the default config will compile the kernel with reduced debug info, which means Rekall won't have the needed structure info to create a profile. Therefor when testing with OpenWRT, the generic config for the kernel needs a minor patch:

In target/linux/generic/config-3.xx

```
-CONFIG_DEBUG_INFO_REDUCED=y
+# CONFIG_DEBUG_INFO_REDUCED is not set
```

And another problem is due to a bug in QEMU, for which USE_MIPS16 has to be disabled, as gcc 4.8 will generate code that QEMU can't handle when that option is set (it's on by default).