Struct CoreDump

pub struct CoreDump { /* private fields */ }

Implementations

impl CoreDump

pub fn new<P: AsRef<Path>>(filename: P) -> Result<CoreDump, Error>

Trait Implementations

impl ProcessMemory for CoreDump

fn read(&self, addr: usize, buf: &mut [u8]) -> Result<(), Error>

Copies memory from another process into an already allocated byte buffer

fn copy(&self, addr: usize, length: usize) -> Result<Vec<u8>, Error>

Copies a series of bytes from another process. Main difference with ‘read’ is that this will allocate memory for you

fn copy_struct<T>(&self, addr: usize) -> Result<T, Error>

where T: Copy,

Copies a structure from another process

fn copy_pointer<T>(&self, ptr: *const T) -> Result<T, Error>

where T: Copy,

Given a pointer that points to a struct in another process, returns the struct

fn copy_vec<T>(&self, addr: usize, length: usize) -> Result<Vec<T>, Error>

where T: Copy,

Copies a series of bytes from another process into a vector of structures of type T.