Bitdefender Hypervisor Memory Introspection
Thread safeness options

Options that control the thread safeness mechanism. More...

Macros

#define THS_CHECK_ONLY   0x00000001
 Will check for safeness, without moving any RIP or stack value. More...
 
#define THS_CHECK_DETOURS   0x00000010
 Will check if any RIP is inside detours. More...
 
#define THS_CHECK_MEMTABLES   0x00000020
 Will check if any RIP is inside memtables. More...
 
#define THS_CHECK_TRAMPOLINE   0x00000040
 Will check if any RIP is inside the agent loader. More...
 
#define THS_CHECK_PTFILTER   0x00000080
 Will check if any RIP is inside the PT filter agent. More...
 
#define THS_CHECK_VEFILTER   0x00000100
 Will check if any RIP is inside the VE filter agent. More...
 
#define THS_CHECK_SWAPGS   0x00000200
 Will check if any RIP is inside a mitigated SWAPGS gadget. More...
 

Detailed Description

Options that control the thread safeness mechanism.

Macro Definition Documentation

◆ THS_CHECK_DETOURS

#define THS_CHECK_DETOURS   0x00000010

Will check if any RIP is inside detours.

Definition at line 18 of file thread_safeness.h.

Referenced by IntGuestIsSafeToDisable(), IntLixApiHookAll(), IntThrSafeIsLiveRIPInIntro(), IntThrSafeIsStackPtrInIntro(), and IntWinGuestFinishInit().

◆ THS_CHECK_MEMTABLES

#define THS_CHECK_MEMTABLES   0x00000020

Will check if any RIP is inside memtables.

Definition at line 19 of file thread_safeness.h.

Referenced by IntGuestIsSafeToDisable(), IntThrSafeIsLiveRIPInIntro(), and IntThrSafeIsStackPtrInIntro().

◆ THS_CHECK_ONLY

◆ THS_CHECK_PTFILTER

#define THS_CHECK_PTFILTER   0x00000080

Will check if any RIP is inside the PT filter agent.

Definition at line 21 of file thread_safeness.h.

Referenced by IntHookPtsCheckIntegrity(), IntPtiDeliverDriverForUnload(), IntThrSafeIsLiveRIPInIntro(), and IntThrSafeIsStackPtrInIntro().

◆ THS_CHECK_SWAPGS

#define THS_CHECK_SWAPGS   0x00000200

Will check if any RIP is inside a mitigated SWAPGS gadget.

Definition at line 23 of file thread_safeness.h.

Referenced by IntGuestIsSafeToDisable(), IntThrSafeIsLiveRIPInIntro(), IntThrSafeIsStackPtrInIntro(), and IntWinGuestFinishInit().

◆ THS_CHECK_TRAMPOLINE

#define THS_CHECK_TRAMPOLINE   0x00000040

Will check if any RIP is inside the agent loader.

Definition at line 20 of file thread_safeness.h.

Referenced by IntGuestIsSafeToDisable(), IntThrSafeIsLiveRIPInIntro(), and IntThrSafeIsStackPtrInIntro().

◆ THS_CHECK_VEFILTER

#define THS_CHECK_VEFILTER   0x00000100

Will check if any RIP is inside the VE filter agent.

Definition at line 22 of file thread_safeness.h.

Referenced by IntThrSafeIsLiveRIPInIntro(), IntThrSafeIsStackPtrInIntro(), and IntVeDeliverDriverForUnload().