osxmem 0.1.4

A macOS library for reading and writing process memory using the Mach kernel APIs.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

#[cfg(target_os = "macos")]
use mach::vm::mach_vm_read_overwrite;
#[cfg(target_os = "macos")]
use mach::kern_return::{kern_return_t, KERN_SUCCESS};
use crate::process::{Process, ProcessErr};
/// Reads the specified type in the given processes memory at the given address
pub fn read_mem<T: Copy>(process: &Process, address: usize) -> Result<T, ProcessErr> {
    #[cfg(target_os = "macos")]
    {
        let mut buf: Vec<u8>= vec![0u8; std::mem::size_of::<T>()];
        let mut outsize: u64 = 0;
        let kern_ret:kern_return_t = unsafe {
            mach_vm_read_overwrite(
                process.port,
                address as u64,
                buf.len() as u64,
                buf.as_mut_ptr() as u64,
                &mut outsize,
            )
        };
        if kern_ret != KERN_SUCCESS {
            return Err(ProcessErr::from_kern(kern_ret));
        }
        return Ok(unsafe { std::ptr::read(buf.as_ptr() as *const T) });
    }
    #[cfg(not(target_os = "macos"))]
    {
        let _ = (process, address);
        panic!("osxmem only supports macOS")
    }
}