Struct WindowsObjectHeaderNameInfo

pub struct WindowsObjectHeaderNameInfo<'a, Driver>
where
    Driver: VmiDriver,
    Driver::Architecture: Architecture + ArchAdapter<Driver>,
{ /* private fields */ }

A name information for a Windows object.

This structure stores the name and directory information associated with a named kernel object.

Implementation Details

Corresponds to _OBJECT_HEADER_NAME_INFO.

Implementations

impl<'a, Driver> WindowsObjectHeaderNameInfo<'a, Driver>

where Driver: VmiDriver, Driver::Architecture: Architecture + ArchAdapter<Driver>,

pub fn new(vmi: VmiState<'a, Driver, WindowsOs<Driver>>, va: Va) -> Self

Creates a new Windows object header name info.

pub fn directory(&self) -> Result<Option<WindowsObject<'a, Driver>>, VmiError>

Returns the directory object associated with the object name.

Implementation Details

Corresponds to _OBJECT_HEADER_NAME_INFO.Directory.

pub fn name(&self) -> Result<String, VmiError>

Returns the name of the object.

Implementation Details

Corresponds to _OBJECT_HEADER_NAME_INFO.Name.

pub fn full_path(&self) -> Result<String, VmiError>

Constructs the full path of a named object from its name information.

Implementation Details

Trait Implementations

impl<Driver> Debug for WindowsObjectHeaderNameInfo<'_, Driver>

where Driver: VmiDriver, Driver::Architecture: Architecture + ArchAdapter<Driver>,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<Driver> VmiVa for WindowsObjectHeaderNameInfo<'_, Driver>

where Driver: VmiDriver, Driver::Architecture: Architecture + ArchAdapter<Driver>,

fn va(&self) -> Va

Returns the virtual address.