baryl 0.0.4

Public SDK for Baryl, a full-system emulation and introspection engine
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174

/* automatically generated by rust-bindgen 0.72.1 */

use crate::arch::{CpuExceptionContext, GuestAddr};

pub const BARYL_ENLIGHTEN_ABI_VERSION: u32 = 6;
pub const BARYL_ENLIGHTEN_MIN_ABI_VERSION: u32 = 6;
pub const BARYL_OS_ANY: u32 = 0;
pub const BARYL_OS_WINDOWS: u32 = 1;
pub const BARYL_OS_LINUX: u32 = 2;
pub const BARYL_OS_MACOS: u32 = 3;
pub const BARYL_COMM_MAX: u32 = 16;
pub const BARYL_MODULE_MAX: u32 = 64;
pub const BARYL_OFFSET_NONE: i32 = -1;
pub const BARYL_CRASH_NONE: u32 = 0;
pub const BARYL_CRASH_ACCESS: u32 = 1;
pub const BARYL_CRASH_ILLEGAL: u32 = 2;
pub const BARYL_CRASH_ARITH: u32 = 3;
pub const BARYL_CRASH_PRIVILEGE: u32 = 4;
#[repr(C)]
#[derive(Debug, Copy, Clone)]
pub struct EnlRef {
    pub ctx: *mut ::core::ffi::c_void,
    pub vtable: *const EnlightenVtable,
}
impl Default for EnlRef {
    fn default() -> Self {
        let mut s = ::core::mem::MaybeUninit::<Self>::uninit();
        unsafe {
            ::core::ptr::write_bytes(s.as_mut_ptr(), 0, 1);
            s.assume_init()
        }
    }
}
#[repr(C)]
#[derive(Debug, Default, Copy, Clone)]
pub struct Process {
    pub taskhead: u64,
    pub mm_va: u64,
    pub dtb: u64,
    pub pid: u64,
    pub ppid: u64,
    pub created_at: u64,
    pub name: [::core::ffi::c_char; 16usize],
}
#[repr(C)]
#[derive(Debug, Default, Copy, Clone)]
pub struct Thread {
    pub taskhead: u64,
    pub pid: u64,
    pub tid: u64,
    pub name: [::core::ffi::c_char; 16usize],
}
#[repr(C)]
#[derive(Debug, Copy, Clone)]
pub struct Module {
    pub base_va: u64,
    pub size: u64,
    pub name: *mut ::core::ffi::c_char,
    pub file: *mut ::core::ffi::c_char,
}
impl Default for Module {
    fn default() -> Self {
        let mut s = ::core::mem::MaybeUninit::<Self>::uninit();
        unsafe {
            ::core::ptr::write_bytes(s.as_mut_ptr(), 0, 1);
            s.assume_init()
        }
    }
}
#[repr(C)]
#[derive(Debug, Copy, Clone)]
pub struct SymbolizedBlock {
    pub process: [::core::ffi::c_char; 16usize],
    pub module: [::core::ffi::c_char; 64usize],
    pub offset: u64,
}
impl Default for SymbolizedBlock {
    fn default() -> Self {
        let mut s = ::core::mem::MaybeUninit::<Self>::uninit();
        unsafe {
            ::core::ptr::write_bytes(s.as_mut_ptr(), 0, 1);
            s.assume_init()
        }
    }
}
#[repr(C)]
#[derive(Debug, Copy, Clone)]
pub struct GuestCrash {
    pub kind: u32,
    pub code: u32,
    pub fault_addr: u64,
    pub pc: u64,
    pub hash: u64,
    pub site: SymbolizedBlock,
}
impl Default for GuestCrash {
    fn default() -> Self {
        let mut s = ::core::mem::MaybeUninit::<Self>::uninit();
        unsafe {
            ::core::ptr::write_bytes(s.as_mut_ptr(), 0, 1);
            s.assume_init()
        }
    }
}
#[repr(C)]
#[derive(Debug, Default, Copy, Clone)]
pub struct EnlightenVtable {
    pub ready: ::core::option::Option<unsafe extern "C" fn(enl: EnlRef) -> ::core::ffi::c_int>,
    pub processes: ::core::option::Option<
        unsafe extern "C" fn(enl: EnlRef, out: *mut Process, cap: u64) -> u64,
    >,
    pub process_by_cr3: ::core::option::Option<
        unsafe extern "C" fn(enl: EnlRef, cr3: u64, out: *mut Process) -> ::core::ffi::c_int,
    >,
    pub process_by_name: ::core::option::Option<
        unsafe extern "C" fn(
            enl: EnlRef,
            name: *const ::core::ffi::c_char,
            out: *mut Process,
        ) -> ::core::ffi::c_int,
    >,
    pub threads: ::core::option::Option<
        unsafe extern "C" fn(enl: EnlRef, proc_: *const Process, out: *mut Thread, cap: u64) -> u64,
    >,
    pub current_thread: ::core::option::Option<
        unsafe extern "C" fn(enl: EnlRef, out: *mut Thread) -> ::core::ffi::c_int,
    >,
    pub kernel_modules: ::core::option::Option<
        unsafe extern "C" fn(enl: EnlRef, out: *mut Module, cap: u64) -> u64,
    >,
    pub user_modules: ::core::option::Option<
        unsafe extern "C" fn(enl: EnlRef, proc_: *const Process, out: *mut Module, cap: u64) -> u64,
    >,
    pub module_at: ::core::option::Option<
        unsafe extern "C" fn(
            enl: EnlRef,
            proc_: *const Process,
            va: u64,
            out: *mut Module,
            off: *mut u64,
        ) -> ::core::ffi::c_int,
    >,
    pub resolve_symbol: ::core::option::Option<
        unsafe extern "C" fn(
            enl: EnlRef,
            proc_: *const Process,
            spec: *const ::core::ffi::c_char,
            out: *mut u64,
        ) -> ::core::ffi::c_int,
    >,
    pub free_modules:
        ::core::option::Option<unsafe extern "C" fn(enl: EnlRef, mods: *mut Module, n: u64)>,
    pub symbolize: ::core::option::Option<
        unsafe extern "C" fn(
            enl: EnlRef,
            key: *const GuestAddr,
            out: *mut SymbolizedBlock,
        ) -> ::core::ffi::c_int,
    >,
    pub classify_fault: ::core::option::Option<
        unsafe extern "C" fn(
            enl: EnlRef,
            ctx: *const CpuExceptionContext,
            out: *mut GuestCrash,
        ) -> ::core::ffi::c_int,
    >,
    pub record_crash: ::core::option::Option<
        unsafe extern "C" fn(
            enl: EnlRef,
            crash: *const GuestCrash,
            dir: *const ::core::ffi::c_char,
        ) -> ::core::ffi::c_int,
    >,
}