Skip to main content

walk_modxview

Function walk_modxview 

Source
pub fn walk_modxview<P: PhysicalMemoryProvider>(
    reader: &ObjectReader<P>,
) -> Result<Vec<ModXviewEntry>>
Expand description

Walk and cross-reference kernel module views for hidden module detection.

Collects modules from three views:

  1. Module list — the modules linked list (LIST_HEAD)
  2. Kobj listmkobj.kobj.entry linkage in sysfs
  3. Memory mapmodule_core/module_init address range validity

Each unique module is checked against all views and classified. Returns Ok(Vec::new()) if the modules symbol is not found (graceful degradation).