Struct pelite::pe64::exports::By

source ·

pub struct By<'a, P> { /* private fields */ }

Expand description

Export directory symbol lookup.

Implementations

source

impl<'a, P: Pe<'a> + Copy> By<'a, P>

source

pub fn functions(&self) -> &'a [Rva]

Gets the export address table.

source

pub fn names(&self) -> &'a [Rva]

Gets the name address table.

The values are RVAs to the exported function’s name, to find its export look at the name index table with the same index.

The names are sorted allowing binary search lookup.

source

pub fn name_indices(&self) -> &'a [u16]

Gets the name index table.

The values are indices (not ordinals!) into the export address table matching name with the same index in the name address table.

source

pub fn check_sorted(&self) -> Result<bool>

Validates and checks if the name table is sorted.

The PE specification says that the list of names should be sorted to allow binary search. This function checks if the names table is actually sorted, if not then various name based lookup functions may fail to find certain exports.

Returns an error if a name entry cannot be read or is otherwise corrupt.

source

pub fn ordinal(&self, ordinal: Ordinal) -> Result<Export<'a>>

Looks up an Export by its ordinal.

source

pub fn name_linear<S: AsRef<[u8]> + ?Sized>(
&self,
name: &S
) -> Result<Export<'a>>

Looks up an Export by its name.

Does a linear scan over the name table. If the name table isn’t sorted this will still be able to find exported functions by name.

Gracefully handles corrupted name entries by ignoring them.

source

pub fn name<S: AsRef<[u8]> + ?Sized>(&self, name: &S) -> Result<Export<'a>>

Looks up an Export by its name.

If the name table isn’t sorted, certain exported functions may fail to be found.

source

pub fn import(&self, import: Import<'_>) -> Result<Export<'a>>

Looks up an Export by its import.

source

pub fn index(&self, index: usize) -> Result<Export<'a>>

Looks up an export by its index.

source

pub fn hint(&self, hint: usize) -> Result<Export<'a>>

Looks up an export by its hint.

source

pub fn hint_name<S: AsRef<[u8]> + ?Sized>(
 &self,
 hint: usize,
 name: &S
) -> Result<Export<'a>>

Looks up an export by its hint and falls back to the name if the hint is incorrect.

source

pub fn name_of_hint(&self, hint: usize) -> Result<&'a CStr>

Looks up the name for a hint.

source

pub fn name_lookup(&self, index: usize) -> Result<Import<'a>>

Given an index in the functions array, gets the named export.

Note that this does a linear scan to find its name, if this is called in a loop over all the exported functions you are accidentally quadratic.

See iter_names to iterate over the exported names in linear time.

source

pub fn iter<'s>(
&'s self
) -> Map<Iter<'a, Rva>, impl 's + Clone + FnMut(&'a Rva) -> Result<Export<'a>>>

Iterate over exported functions.

Not every exported function has a name, some are exported by ordinal. Looking up the exported function’s name with name_lookup results in quadratic performance. If the exported function’s name is important consider building a cache or using iter_names instead.

source