Struct CrashDumpProvider 

pub struct CrashDumpProvider { /* private fields */ }

Provider that exposes physical memory from a Windows 64-bit crash dump.

Implementations

impl CrashDumpProvider

pub fn from_bytes(bytes: &[u8]) -> Result<Self>

Parse a crash dump from an in-memory byte slice.

pub fn from_path(path: &Path) -> Result<Self>

Parse a crash dump from a file path.

Trait Implementations

impl Debug for CrashDumpProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PhysicalMemoryProvider for CrashDumpProvider

fn read_phys(&self, addr: u64, buf: &mut [u8]) -> Result<usize>

Read up to buf.len() bytes starting at physical address addr. Returns the number of bytes actually read (may be less if crossing a gap).

fn ranges(&self) -> &[PhysicalRange]

Return all valid physical address ranges in the dump.

fn format_name(&self) -> &str

Human-readable format name (e.g., “LiME”, “AVML v2”).

fn metadata(&self) -> Option<DumpMetadata>

Optional metadata extracted from the dump header. Returns None for formats that carry no metadata (Raw, LiME, AVML).

fn total_size(&self) -> u64

Total physical memory size (sum of all range lengths).