Struct VmaInfo 

pub struct VmaInfo {
    pub pid: u64,
    pub comm: String,
    pub start: u64,
    pub end: u64,
    pub flags: VmaFlags,
    pub pgoff: u64,
    pub file_backed: bool,
}

Information about a process virtual memory area.

Fields

pid: u64

PID of the owning process.

comm: String

Process name.

start: u64

VMA start virtual address.

end: u64

VMA end virtual address.

flags: VmaFlags

Permission flags.

pgoff: u64

File page offset (vm_pgoff).

file_backed: bool

Whether the VMA is file-backed.

Trait Implementations

impl Clone for VmaInfo

fn clone(&self) -> VmaInfo

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VmaInfo

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl IntoForensicEvents for VmaInfo

fn into_forensic_events(self) -> Vec<ForensicEvent>

Consume this value and produce forensic events.