Struct LinuxProcess

pub struct LinuxProcess { /* private fields */ }

Implementations

impl LinuxProcess

pub fn try_new(info: ProcessInfo) -> Result<Self>

pub fn mmap_path_to_name_string(path: &MMapPath) -> ReprCString

pub fn mmap_path_to_path_string(path: &MMapPath) -> ReprCString

Trait Implementations

impl Clone for LinuxProcess

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'cglue_a, CGlueInst: Deref<Target = LinuxProcess>, CGlueCtx: ContextBounds> IntoProcessInstanceVtableFiller<'cglue_a, CGlueInst, CGlueCtx> for LinuxProcess

fn fill_table( table: IntoProcessInstanceVtables<'cglue_a, CGlueInst, CGlueCtx>, ) -> IntoProcessInstanceVtables<'cglue_a, CGlueInst, CGlueCtx>

impl MemoryView for LinuxProcess

fn read_raw_iter(&mut self, data: ReadRawMemOps<'_, '_, '_, '_>) -> Result<()>

fn write_raw_iter(&mut self, data: WriteRawMemOps<'_, '_, '_, '_>) -> Result<()>

fn metadata(&self) -> MemoryViewMetadata

fn read_iter<'a, 'b>( &mut self, inp: impl Iterator<Item = CTup2<Address, CSliceMut<'a, u8>>>, out: Option<&mut OpaqueCallback<'b, CTup2<Address, CSliceMut<'a, u8>>>>, out_fail: Option<&mut OpaqueCallback<'b, CTup2<Address, CSliceMut<'a, u8>>>>, ) -> Result<(), Error>

Read arbitrary amount of data.

fn read_raw_list( &mut self, data: &mut [CTup2<Address, CSliceMut<'_, u8>>], ) -> Result<(), PartialError<()>>

fn read_raw_into( &mut self, addr: Address, out: &mut [u8], ) -> Result<(), PartialError<()>>

fn read_raw( &mut self, addr: Address, len: usize, ) -> Result<Vec<u8>, PartialError<Vec<u8>>>

fn read_into<T>( &mut self, addr: Address, out: &mut T, ) -> Result<(), PartialError<()>>

where T: Pod + ?Sized, Self: Sized,

fn read<T>(&mut self, addr: Address) -> Result<T, PartialError<T>>

where T: Pod, Self: Sized,

fn read_addr32( &mut self, addr: Address, ) -> Result<Address, PartialError<Address>>

where Self: Sized,

fn read_addr64( &mut self, addr: Address, ) -> Result<Address, PartialError<Address>>

where Self: Sized,

fn read_addr_arch( &mut self, arch: &'static dyn Architecture, addr: Address, ) -> Result<Address, PartialError<Address>>

where Self: Sized,

fn read_ptr_into<U, T>( &mut self, ptr: Pointer<U, T>, out: &mut T, ) -> Result<(), PartialError<()>>

where U: PrimitiveAddress, T: Pod + ?Sized, Self: Sized,

fn read_ptr<U, T>(&mut self, ptr: Pointer<U, T>) -> Result<T, PartialError<T>>

where U: PrimitiveAddress, T: Pod, Self: Sized,

fn write_iter<'a, 'b>( &mut self, inp: impl Iterator<Item = CTup2<Address, CSliceRef<'a, u8>>>, out: Option<&mut OpaqueCallback<'b, CTup2<Address, CSliceRef<'a, u8>>>>, out_fail: Option<&mut OpaqueCallback<'b, CTup2<Address, CSliceRef<'a, u8>>>>, ) -> Result<(), Error>

Write arbitrary amount of data.

fn write_raw_list( &mut self, data: &[CTup2<Address, CSliceRef<'_, u8>>], ) -> Result<(), PartialError<()>>

fn write_raw( &mut self, addr: Address, data: &[u8], ) -> Result<(), PartialError<()>>

fn write<T>(&mut self, addr: Address, data: &T) -> Result<(), PartialError<()>>

where T: Pod + ?Sized, Self: Sized,

fn write_ptr<U, T>( &mut self, ptr: Pointer<U, T>, data: &T, ) -> Result<(), PartialError<()>>

where U: PrimitiveAddress, T: Pod + ?Sized, Self: Sized,

fn read_char_array( &mut self, addr: Address, len: usize, ) -> Result<String, PartialError<String>>

👎Deprecated: please use read_utf8 or read_utf8_lossy instead

Reads a fixed length string from the target.

fn read_char_string_n( &mut self, addr: Address, n: usize, ) -> Result<String, PartialError<String>>

👎Deprecated: please use read_utf8 or read_utf8_lossy instead

Reads a variable length string with a length of up to specified amount from the target.

fn read_char_string( &mut self, addr: Address, ) -> Result<String, PartialError<String>>

👎Deprecated: please use read_utf8 or read_utf8_lossy instead

Reads a variable length string with up to 4kb length from the target.

fn read_utf8( &mut self, addr: Address, max_length: usize, ) -> Result<String, PartialError<String>>

Reads a string at the given position with a length of up to max_length characters.

fn read_utf8_lossy( &mut self, addr: Address, max_length: usize, ) -> Result<String, PartialError<String>>

Reads a string at the given position with a length of up to max_length characters.

fn cursor(&mut self) -> MemoryCursor<Fwd<&mut Self>>

where Self: Sized,

Returns a cursor over this memory view. See MemoryCursor for more details.

fn into_cursor(self) -> MemoryCursor<Self>

where Self: Sized,

Converts this memory view into a cursor. See MemoryCursor for more details.

fn cursor_at(&mut self, address: Address) -> MemoryCursor<Fwd<&mut Self>>

where Self: Sized,

Returns a cursor over this memory view at the specified address. See MemoryCursor for more details.

fn into_cursor_at(self, address: Address) -> MemoryCursor<Self>

where Self: Sized,

Converts this memory view into a cursor at the specified address. See MemoryCursor for more details.

fn batcher(&mut self) -> MemoryViewBatcher<'_, Self>

where Self: Sized,

fn into_overlay_arch( self, arch: &'static dyn Architecture, ) -> ArchOverlayView<Self>

where Self: Sized,

fn overlay_arch( &mut self, arch: &'static dyn Architecture, ) -> ArchOverlayView<Fwd<&mut Self>>

where Self: Sized,

fn into_overlay_arch_parts( self, arch_bits: u8, little_endian: bool, ) -> ArchOverlayView<Self>

where Self: Sized,

fn overlay_arch_parts( &mut self, arch_bits: u8, little_endian: bool, ) -> ArchOverlayView<Fwd<&mut Self>>

where Self: Sized,

fn into_remap_view(self, mem_map: MemoryMap<(Address, u64)>) -> RemapView<Self>

where Self: Sized,

fn remap_view( &mut self, mem_map: MemoryMap<(Address, u64)>, ) -> RemapView<Fwd<&mut Self>>

where Self: Sized,

fn into_phys_mem(self) -> PhysicalMemoryOnView<Self>

where Self: Sized,

fn phys_mem(&mut self) -> PhysicalMemoryOnView<Fwd<&mut Self>>

where Self: Sized,

impl Process for LinuxProcess

fn module_address_list_callback( &mut self, target_arch: Option<&ArchitectureIdent>, callback: ModuleAddressCallback<'_>, ) -> Result<()>

Walks the process’ module list and calls the provided callback for each module structure address

Arguments

• target_arch - sets which architecture to retrieve the modules for (if emulated). Choose between Some(ProcessInfo::sys_arch()), and Some(ProcessInfo::proc_arch()). None for all.
• callback - where to pass each matching module to. This is an opaque callback.

fn module_by_address( &mut self, address: Address, architecture: ArchitectureIdent, ) -> Result<ModuleInfo>

Retrieves a module by its structure address and architecture

Arguments

• address - address where module’s information resides in
• architecture - architecture of the module. Should be either ProcessInfo::proc_arch, or ProcessInfo::sys_arch.

fn primary_module_address(&mut self) -> Result<Address>

Retrieves address of the primary module structure of the process

This will generally be for the initial executable that was run

fn info(&self) -> &ProcessInfo

Retrieves the process info

fn state(&mut self) -> ProcessState

Retrieves the state of the process

fn set_dtb(&mut self, _dtb1: Address, _dtb2: Address) -> Result<()>

Changes the dtb this process uses for memory translations. This function serves no purpose in memflow-native.

fn module_import_list_callback( &mut self, info: &ModuleInfo, callback: ImportCallback<'_>, ) -> Result<()>

Retrieves a list of all imports of a given module

fn module_export_list_callback( &mut self, info: &ModuleInfo, callback: ExportCallback<'_>, ) -> Result<()>

Retrieves a list of all exports of a given module

fn module_section_list_callback( &mut self, info: &ModuleInfo, callback: SectionCallback<'_>, ) -> Result<()>

Retrieves a list of all sections of a given module

fn mapped_mem_range( &mut self, gap_size: imem, start: Address, end: Address, out: MemoryRangeCallback<'_>, )

fn module_list_callback( &mut self, target_arch: Option<&ArchitectureIdent>, callback: OpaqueCallback<'_, ModuleInfo>, ) -> Result<(), Error>

Walks the process’ module list and calls the provided callback for each module

fn module_by_name_arch( &mut self, name: &str, architecture: Option<&ArchitectureIdent>, ) -> Result<ModuleInfo, Error>

Finds a process module by its name under specified architecture

fn module_by_name(&mut self, name: &str) -> Result<ModuleInfo, Error>

Finds any architecture process module by its name

fn module_list_arch( &mut self, target_arch: Option<&ArchitectureIdent>, ) -> Result<Vec<ModuleInfo>, Error>

Retrieves a module list for the process

fn module_list(&mut self) -> Result<Vec<ModuleInfo>, Error>

Retrieves a module list for the process

fn primary_module(&mut self) -> Result<ModuleInfo, Error>

Retrieves information for the primary module of the process

fn module_import_list( &mut self, info: &ModuleInfo, ) -> Result<Vec<ImportInfo>, Error>

Retrieves a list of all imports of a given module

fn module_export_list( &mut self, info: &ModuleInfo, ) -> Result<Vec<ExportInfo>, Error>

Retrieves a list of all exports of a given module

fn module_section_list( &mut self, info: &ModuleInfo, ) -> Result<Vec<SectionInfo>, Error>

Retrieves a list of all sections of a given module

fn module_import_by_name( &mut self, info: &ModuleInfo, name: &str, ) -> Result<ImportInfo, Error>

Finds a single import of a given module by its name

fn module_export_by_name( &mut self, info: &ModuleInfo, name: &str, ) -> Result<ExportInfo, Error>

Finds a single export of a given module by its name

fn module_section_by_name( &mut self, info: &ModuleInfo, name: &str, ) -> Result<SectionInfo, Error>

Finds a single section of a given module by its name

fn mapped_mem_range_vec( &mut self, gap_size: i64, start: Address, end: Address, ) -> Vec<CTup3<Address, u64, PageType>>

fn mapped_mem( &mut self, gap_size: i64, out: OpaqueCallback<'_, CTup3<Address, u64, PageType>>, )

fn mapped_mem_vec( &mut self, gap_size: i64, ) -> Vec<CTup3<Address, u64, PageType>>

impl<'cglue_a, CGlueInst: Deref<Target = LinuxProcess>, CGlueCtx: ContextBounds> ProcessInstanceVtableFiller<'cglue_a, CGlueInst, CGlueCtx> for LinuxProcess

fn fill_table( table: ProcessInstanceVtables<'cglue_a, CGlueInst, CGlueCtx>, ) -> ProcessInstanceVtables<'cglue_a, CGlueInst, CGlueCtx>