Struct VolatilitySymbol 

pub struct VolatilitySymbol { /* private fields */ }

A global symbol declared within the loaded volatility profile

Can be obtained via the symbol_from_name function.

Note: This type is opaque due to having an undefined layout and thus may only be accessed behind a reference.

Implementations

impl VolatilitySymbol

pub fn addr(&self) -> target_ptr_t

Get the address of the given symbol relative to the KASLR offset. Note that additional calculations may be required afterwards to handle per-CPU structs.

pub fn raw_value(&self) -> target_ptr_t

Get the raw value of the given symbol. Note that additional calculations may be required afterwards to handle per-CPU structs.

pub fn name(&self) -> Option<String>

Get the symbol name from the volatility structure if it can be found