Skip to main content

StructLayout

vmi_os_windows

Trait StructLayout 

Source 
pub trait StructLayout {
    const ADDRESS_WIDTH: u64;

    // Required methods
    fn read_va<Driver>(
        vmi: VmiState<'_, WindowsOs<Driver>>,
        ctx: impl Into<AccessContext>,
    ) -> Result<Va, VmiError>
       where Driver: VmiRead,
             Driver::Architecture: ArchAdapter<Driver>;
    fn read_unicode_string<Driver>(
        vmi: VmiState<'_, WindowsOs<Driver>>,
        ctx: impl Into<AccessContext>,
    ) -> Result<String, VmiError>
       where Driver: VmiRead,
             Driver::Architecture: ArchAdapter<Driver>;
}
Expand description

Pointer-width-dependent operations for reading Windows structures.

Windows structures contain pointer-sized fields (PVOID, UNICODE_STRING, LIST_ENTRY, …) whose layout differs between 32-bit and 64-bit processes. This trait abstracts over the pointer width so that structure accessors can be generic over both layouts.

Required Associated Constants§

Source

const ADDRESS_WIDTH: u64

The address width (i.e. pointer size) in bytes.

Required Methods§

Source

fn read_va<Driver>( vmi: VmiState<'_, WindowsOs<Driver>>, ctx: impl Into<AccessContext>, ) -> Result<Va, VmiError>
where Driver: VmiRead, Driver::Architecture: ArchAdapter<Driver>,

Reads a pointer-sized virtual address from guest memory.

Source

fn read_unicode_string<Driver>( vmi: VmiState<'_, WindowsOs<Driver>>, ctx: impl Into<AccessContext>, ) -> Result<String, VmiError>
where Driver: VmiRead, Driver::Architecture: ArchAdapter<Driver>,

Reads a UNICODE_STRING from guest memory.

Dyn Compatibility§

This trait is not dyn compatible.

In older versions of Rust, dyn compatibility was called "object safety".

Implementors§