View source for User:Realazthat/Projects wishlist/LLVM/x86

Write a program that can convert convert x86 to LLVM IR, otherwise known as [[wp:Binary_translation#Static_binary_translation| static binary translation]].

==Points to ponder==
* Q: Is it possible?
*: A: It should be of course; they ''are'' both Turing-complete
*: Longer Answer: It might be more difficult than it sounds; it hasn't been done yet AFAIK

==Possible Methods==
* Translate x86 to [http://bitblaze.cs.berkeley.edu/vine.html Vine], then Vine to LLVM IR
** Vine has about a dozen instructions, should be simple to translate
** Seems that Vine only translates from a [http://bitblaze.cs.berkeley.edu/temu.html TEMU] trace, I wonder if this includes the entire program, or just the execution path (or perhaps it just marks the path as tainted for Vine's [[wp:SMT_solver| SMT solver]], which also happens to be [http://sites.google.com/site/stpfastprover/ STP]). Incidentally, TEMU is based on [[wp:QEMU| QEMU]].
* Use [http://code.google.com/p/llvm-qemu/ llvm-qemu] to dynamically translate x86 to LLVM IR
** By dynamically translate, I think it means function by function during execution, as there are some things that need to be evaluated at runtime before it can be translated correctly
** http://wwwse.inf.tu-dresden.de/hotdep/S2-1-candea-cameraReady_HotDep_2009.pdf
**: A paper describing some ugly (I think) mutant of QEMU and LLVM
** http://lists.cs.uiuc.edu/pipermail/llvmdev/2008-April/013689.html
**: A mailing list post by the author of llvm-qemu regarding the methods used and the feasibility of static translation
* [http://www.itee.uq.edu.au/~cristina/uqbt.html UQBT] 
** BSD-style license, by Sun
** Stopped in 2001
** RISC-like backends
*** SPARC

==Reference Material==
* [http://www.crazylazy.info/blog/content/x86-differently-vine-and-llvm-klee x86 differently: VINE and LLVM-klee]