mquire 1.2.7

Memory forensics and analysis tool for querying Linux kernel memory dumps using SQL
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

//
// Copyright (c) 2025-present, Trail of Bits, Inc.
// All rights reserved.
//
// This source code is licensed in accordance with the terms specified in
// the LICENSE file found in the root directory of this source tree.
//

use std::{io, result::Result as StandardResult};

/// Error kinds for memory operations
#[derive(Copy, Clone, Debug, PartialEq, Eq)]
pub enum ErrorKind {
    /// An IO error has occurred while accessing the lower memory backing store
    IOError,

    /// The operations could not be completed because the page tables are different
    InvalidAddressSpace,

    /// The snapshot format is invalid or not supported
    InvalidSnapshotFormat,
}

/// Error type for memory operations
#[derive(Debug)]
pub struct Error {
    /// Error kind
    kind: ErrorKind,

    /// Error message
    message: String,
}

/// A result type for memory operations
pub type Result<T> = StandardResult<T, Error>;

impl Error {
    /// Creates a new memory error
    pub fn new(kind: ErrorKind, message: &str) -> Error {
        Error {
            kind,
            message: message.to_owned(),
        }
    }

    /// Returns the error kind
    pub fn kind(&self) -> ErrorKind {
        self.kind
    }

    /// Returns the error message
    pub fn message(&self) -> &str {
        &self.message
    }
}

impl From<io::Error> for Error {
    /// Converts an io::Error into a memory error
    fn from(error: io::Error) -> Self {
        Error {
            kind: ErrorKind::IOError,
            message: error.to_string(),
        }
    }
}