Struct Reader 

pub struct Reader<'parser> { /* private fields */ }

A reader lets you translate & read physical memory from a dump file.

Implementations

impl<'parser> Reader<'parser>

pub fn new(parser: &'parser KernelDumpParser) -> Self

pub fn translate(&self, gpa: Gpa) -> Result<SeekFrom>

Translate a Gpa into a file offset. At that file offset is where the content of the page resides in.

pub fn read_exact(&self, gpa: Gpa, buf: &mut [u8]) -> Result<()>

Read the exact amount of bytes asked by the user & return a Error::PartialRead error if it couldn’t read as much as wanted.

pub fn read(&self, gpa: Gpa, buf: &mut [u8]) -> Result<usize>

Read the physical memory starting at gpa into buf. If it cannot read as much as asked by the user because the dump file is missing a physical memory page, the function doesn’t error out and return the amount of bytes that was successfully read.

pub fn read_struct<T>(&self, gpa: Gpa) -> Result<T>

Read a T from physical memory.