Bitdefender Hypervisor Memory Introspection
guest_stack.h File Reference
#include "introtypes.h"

Go to the source code of this file.

Data Structures

struct  _STACK_ELEMENT
 Structure that describes a stack trace element. More...
 
struct  _STACK_TRACE
 Structure that describes a stack trace. More...
 

Macros

#define STACK_ADDR_NOT_INSIDE_FUNCTION   0x00000001
 Flag used to tell that the ReturnAddress in a STACK_ELEMENT is not inside any function. More...
 
#define STACK_CALL_ADDRESS_IMPRECISE   0x00000002
 Flag used to tell that the CalledAddress in a STACK_ELEMENT is not precise (it's an approximation). More...
 
#define STACK_INTERRUPT_ROUTINE   0x00000004
 Flag used to tell that the ReturnAddress in a STACK_ELEMENT is an interrupt routine. More...
 
#define STACK_EXCEPTION_ROUTINE   0x00000008
 Flag used to tell that the ReturnAddress in a STACK_ELEMENT is an exception routine. More...
 
#define STACK_FLG_ONLY_DRIVER_ADDRS   0x00000001
 Flag that tells to only get addresses inside drivers. More...
 
#define STACK_FLG_FAST_GET   0x00000002
 Flag that tells to only get return addresses (no drivers). More...
 

Typedefs

typedef struct _STACK_ELEMENT STACK_ELEMENT
 Structure that describes a stack trace element. More...
 
typedef struct _STACK_ELEMENTPSTACK_ELEMENT
 
typedef struct _STACK_TRACE STACK_TRACE
 Structure that describes a stack trace. More...
 
typedef struct _STACK_TRACEPSTACK_TRACE
 

Macro Definition Documentation

◆ STACK_ADDR_NOT_INSIDE_FUNCTION

#define STACK_ADDR_NOT_INSIDE_FUNCTION   0x00000001

Flag used to tell that the ReturnAddress in a STACK_ELEMENT is not inside any function.

Definition at line 11 of file guest_stack.h.

◆ STACK_CALL_ADDRESS_IMPRECISE

#define STACK_CALL_ADDRESS_IMPRECISE   0x00000002

Flag used to tell that the CalledAddress in a STACK_ELEMENT is not precise (it's an approximation).

Definition at line 13 of file guest_stack.h.

Referenced by IntWinStackTraceGet64().

◆ STACK_EXCEPTION_ROUTINE

#define STACK_EXCEPTION_ROUTINE   0x00000008

Flag used to tell that the ReturnAddress in a STACK_ELEMENT is an exception routine.

Definition at line 17 of file guest_stack.h.

Referenced by IntWinStackTraceGet64().

◆ STACK_FLG_FAST_GET

#define STACK_FLG_FAST_GET   0x00000002

Flag that tells to only get return addresses (no drivers).

Definition at line 22 of file guest_stack.h.

Referenced by IntLixStackTraceGet().

◆ STACK_FLG_ONLY_DRIVER_ADDRS

#define STACK_FLG_ONLY_DRIVER_ADDRS   0x00000001

Flag that tells to only get addresses inside drivers.

Definition at line 20 of file guest_stack.h.

Referenced by IntWinStackTraceGet64().

◆ STACK_INTERRUPT_ROUTINE

#define STACK_INTERRUPT_ROUTINE   0x00000004

Flag used to tell that the ReturnAddress in a STACK_ELEMENT is an interrupt routine.

Definition at line 15 of file guest_stack.h.

Referenced by IntWinStackTraceGet64().

Typedef Documentation

◆ PSTACK_ELEMENT

typedef struct _STACK_ELEMENT * PSTACK_ELEMENT

◆ PSTACK_TRACE

typedef struct _STACK_TRACE * PSTACK_TRACE

◆ STACK_ELEMENT

typedef struct _STACK_ELEMENT STACK_ELEMENT

Structure that describes a stack trace element.

◆ STACK_TRACE

typedef struct _STACK_TRACE STACK_TRACE

Structure that describes a stack trace.