Abstract:The rise in instruction set architecture (ISA) diversity and the growing adoption of virtual machines are driving a need for fast, scalable, full-system, cross-ISA emulation and instrumentation tools. Unfortunately, achieving high performance for these cross-ISA tools is challenging due to dynamic binary translation (DBT) overhead and the complexity of instrumenting full-system emulators. In this paper we improve cross-ISA emulation and instrumentation performance through three novel techniques. First, we increase floating point (FP) emulation performance by observing that most FP operations can be correctly emulated by surrounding the use of the host FP unit with a minimal amount of non-FP code. Second, we introduce the design of a translator with a shared code cache that scales for multi-core guests, even when they generate translated code in parallel at a high rate. Third, we present an ISA-agnostic instrumentation layer that can instrument guest operations that occur outside of the DBT’s intermediate representation (IR), which are common in full-system emulators. We implement our approach in Qelt, a high-performance cross-ISA machine emulator and instrumentation tool based on QEMU. Our results show that Qelt scales to 32 cores when emulating a guest machine used for parallel compilation, which demonstrates scalable code translation. Furthermore, experiments based on SPEC06 show that Qelt (1) outperforms QEMU as a full-system cross-ISA machine emulator by 1.76×/2.18× for integer/FP workloads, (2) outperforms state-of-the-art, cross-ISA, full-system instrumentation tools by 1.5×-3×, and (3) can match the performance of Pin, a state-of-the-art, same-ISA DBI tool, when used for complex instrumentation such as cache simulation.

CrossMapping: Harmonizing Memory Consistency in Cross-ISA Binary Translation.

A Hardware Non-Invasive Mapping Method for Condition Bits in Binary Translation

SPC-Indexed Indirect Branch Hardware Cache Redirecting Technique in Binary Translation

CrossDBT: An LLVM-Based User-Level Dynamic Binary Translation Emulator

Cross-ISA machine instrumentation using fast and scalable dynamic binary translation

A Cross-ISA Kernelized High-Performance Parallel Emulator

Performance Improvements via Peephole Optimization in Dynamic Binary Translation

XEMU: a Cross-Isa Full-System Emulator on Multiple Processor Architectures.

EXAMINER-PRO: Testing Arm Emulators Across Different Privileges

FPGA based hardware-software co-designed dynamic binary translation system

TransARM: an Efficient Instruction Set Architecture Emulator

A System-Level Dynamic Binary Translator using Automatically-Learned Translation Rules

Crossbit: A Multi-Sources And Multi-Targets Dbt

A hardware / software co-designed virtual machine to support multiple ISAs

An Emulator for Executing IA-32 Applications on ARM-Based Systems.

Minimizing Bank Conflict Delay for Real-Time Embedded Multicore Systems via Bank Mapping.

MTCrossBit: A Dynamic Binary Translation System Based on Multithreaded Optimization

A study on register mapping optimization in dynamic binary translation

Effective Exploitation of SIMD Resources in Cross-Isa Virtualization.

Xar-Trek: Run-time Execution Migration among FPGAs and Heterogeneous-ISA CPUs

Exploiting SIMD Asymmetry in ARM-to-x86 Dynamic Binary Translation