Struct NoOS

pub struct NoOS;

Marker type for a missing OS implementation.

Trait Implementations

impl<Driver> VmiOs<Driver> for NoOS

where Driver: VmiDriver,

type Process<'a> = NoOS

The process type.

type Thread<'a> = NoOS

The thread type.

type Image<'a> = NoOS

The image type.

type Module<'a> = NoOS

The kernel module type.

type Region<'a> = NoOS

The memory region type.

type Mapped<'a> = NoOS

The memory mapped region type.

fn kernel_image_base(_vmi: VmiState<'_, Driver, Self>) -> Result<Va, VmiError>

Retrieves the base address of the kernel image.

fn kernel_information_string( _vmi: VmiState<'_, Driver, Self>, ) -> Result<String, VmiError>

Retrieves an implementation-specific string containing kernel information.

fn kpti_enabled(_vmi: VmiState<'_, Driver, Self>) -> Result<bool, VmiError>

Checks if Kernel Page Table Isolation (KPTI) is enabled.

fn modules( _vmi: VmiState<'_, Driver, Self>, ) -> Result<impl Iterator<Item = Result<Self::Module<'_>, VmiError>> + '_, VmiError>

Returns an iterator over the loaded kernel modules.

fn processes( _vmi: VmiState<'_, Driver, Self>, ) -> Result<impl Iterator<Item = Result<Self::Process<'_>, VmiError>> + '_, VmiError>

Returns an iterator over the processes.

fn process<'a>( _vmi: VmiState<'_, Driver, Self>, _process: ProcessObject, ) -> Result<Self::Process<'_>, VmiError>

Returns the process corresponding to the given process object.

fn current_process<'a>( _vmi: VmiState<'_, Driver, Self>, ) -> Result<Self::Process<'_>, VmiError>

Returns the currently executing process.

fn system_process<'a>( _vmi: VmiState<'_, Driver, Self>, ) -> Result<Self::Process<'_>, VmiError>

Returns the system process object.

fn thread<'a>( _vmi: VmiState<'_, Driver, Self>, _thread: ThreadObject, ) -> Result<Self::Thread<'_>, VmiError>

Returns the thread corresponding to the given thread object.

fn current_thread( _vmi: VmiState<'_, Driver, Self>, ) -> Result<Self::Thread<'_>, VmiError>

Returns the currently executing thread.

fn image<'a>( _vmi: VmiState<'_, Driver, Self>, _image_base: Va, ) -> Result<Self::Image<'_>, VmiError>

Returns the image corresponding to the given base address.

fn module<'a>( _vmi: VmiState<'_, Driver, Self>, _module: Va, ) -> Result<Self::Module<'_>, VmiError>

Returns the kernel module corresponding to the given base address.

fn region<'a>( _vmi: VmiState<'_, Driver, Self>, _region: Va, ) -> Result<Self::Region<'_>, VmiError>

Returns the memory region corresponding to the given address.

fn syscall_argument( _vmi: VmiState<'_, Driver, Self>, _index: u64, ) -> Result<u64, VmiError>

Retrieves a specific syscall argument according to the system call ABI.

fn function_argument( _vmi: VmiState<'_, Driver, Self>, _index: u64, ) -> Result<u64, VmiError>

Retrieves a specific function argument according to the calling convention of the operating system.

fn function_return_value( _vmi: VmiState<'_, Driver, Self>, ) -> Result<u64, VmiError>

Retrieves the return value of a function.

fn last_error(_vmi: VmiState<'_, Driver, Self>) -> Result<Option<u32>, VmiError>

Retrieves the last error value.

impl<Driver> VmiOsImage<'_, Driver> for NoOS

where Driver: VmiDriver,

type Os = NoOS

The VMI OS type.

fn base_address(&self) -> Va

Returns the base address of the image.

fn architecture(&self) -> Result<Option<VmiOsImageArchitecture>, VmiError>

Returns the target architecture for which the image was compiled.

fn exports(&self) -> Result<Vec<VmiOsImageSymbol>, VmiError>

Returns the exported symbols.

impl<Driver> VmiOsMapped<'_, Driver> for NoOS

where Driver: VmiDriver,

type Os = NoOS

The VMI OS type.

fn path(&self) -> Result<Option<String>, VmiError>

Returns the path to the file backing the region.

impl<Driver> VmiOsModule<'_, Driver> for NoOS

where Driver: VmiDriver,

type Os = NoOS

The VMI OS type.

fn base_address(&self) -> Result<Va, VmiError>

Returns the base address of the module.

fn size(&self) -> Result<u64, VmiError>

Returns the size of the module.

fn name(&self) -> Result<String, VmiError>

Returns the name of the module.

impl<'a, Driver> VmiOsProcess<'a, Driver> for NoOS

where Driver: VmiDriver,

type Os = NoOS

The VMI OS type.

fn id(&self) -> Result<ProcessId, VmiError>

Returns the process ID.

fn object(&self) -> Result<ProcessObject, VmiError>

Returns the process object.

fn name(&self) -> Result<String, VmiError>

Returns the name of the process.

fn parent_id(&self) -> Result<ProcessId, VmiError>

Returns the parent process ID.

fn architecture(&self) -> Result<VmiOsImageArchitecture, VmiError>

Returns the architecture of the process.

fn translation_root(&self) -> Result<Pa, VmiError>

Returns the process’s page table translation root.

fn user_translation_root(&self) -> Result<Pa, VmiError>

Returns the user-mode page table translation root.

fn image_base(&self) -> Result<Va, VmiError>

Returns the base address of the process image.

fn regions( &self, ) -> Result<impl Iterator<Item = Result<<Self::Os as VmiOs<Driver>>::Region<'_>, VmiError>>, VmiError>

Returns an iterator over the process’s memory regions.

fn find_region( &self, _address: Va, ) -> Result<Option<<Self::Os as VmiOs<Driver>>::Region<'a>>, VmiError>

Finds the memory region containing the given address.

fn threads( &self, ) -> Result<impl Iterator<Item = Result<<Self::Os as VmiOs<Driver>>::Thread<'a>, VmiError>>, VmiError>

Returns an iterator over the threads in the process.

fn is_valid_address(&self, _address: Va) -> Result<Option<bool>, VmiError>

Checks whether the given virtual address is valid in the process.

impl<'a, Driver> VmiOsRegion<'a, Driver> for NoOS

where Driver: VmiDriver,

type Os = NoOS

The VMI OS type.

fn start(&self) -> Result<Va, VmiError>

Returns the starting virtual address of the memory region.

fn end(&self) -> Result<Va, VmiError>

Returns the ending virtual address of the memory region.

fn protection(&self) -> Result<MemoryAccess, VmiError>

Returns the memory protection of the memory region.

fn kind(&self) -> Result<VmiOsRegionKind<'a, Driver, Self::Os>, VmiError>

Returns the memory region’s kind.

impl<Driver> VmiOsThread<'_, Driver> for NoOS

where Driver: VmiDriver,

type Os = NoOS

The VMI OS type.

fn id(&self) -> Result<ThreadId, VmiError>

Returns the thread ID.

fn object(&self) -> Result<ThreadObject, VmiError>

Returns the thread object.

impl VmiVa for NoOS

fn va(&self) -> Va

Returns the virtual address.