Struct EvtxChunkData 

pub struct EvtxChunkData {
    pub header: EvtxChunkHeader,
    pub data: Vec<u8>,
}

A struct which owns all the data associated with a chunk. See EvtxChunk for more.

Fields

header: EvtxChunkHeader

data: Vec<u8>

Implementations

impl EvtxChunkData

pub fn new(data: Vec<u8>, validate_checksum: bool) -> Result<Self, ChunkError>

Construct a new chunk from the given data. Note that even when validate_checksum is set to false, the header magic is still checked.

pub fn parse( &mut self, settings: Arc<ParserSettings>, ) -> Result<EvtxChunk<'_>, ChunkError>

Require that the settings live at least as long as &self.

pub fn parse_with_arena( &mut self, settings: Arc<ParserSettings>, arena: Bump, ) -> Result<EvtxChunk<'_>, ChunkError>

Parse a chunk while reusing an existing bump arena.

The arena is reset before use, retaining its capacity for reuse across chunks.

pub fn validate_data_checksum(&self) -> bool

pub fn validate_header_checksum(&self) -> bool

pub fn validate_checksum(&self) -> bool