Reverse Debugging of Kernel Failures in Deployed Systems
summary
Kernel REPT is a system for reverse debugging Windows kernel failures in deployed machines that records efficient hardware traces (per-processor control flow) and uses context-switch history to attribute traces to software threads. It reconstructs data flow by selectively emulating machine instructions and hardware events (interrupts, exceptions) without adding extra software layers, enabling interactive reverse debugging, automated root-cause analysis for some failures, and proactive bug detection by checking reconstructed histories against invariants.
AI-written summary · about