Bitdefender Hypervisor Memory Introspection
lixcred.h
Go to the documentation of this file.
1 /*
2  * Copyright (c) 2020 Bitdefender
3  * SPDX-License-Identifier: Apache-2.0
4  */
5 #ifndef _LIXCRED_H_
6 #define _LIXCRED_H_
7 
8 #include "introtypes.h"
9 
13 typedef struct _LIX_CREDS
14 {
15  LIST_ENTRY Link;
16  QWORD Gva;
17  DWORD RefCount;
18  DWORD Checksum;
19 } LIX_CREDS;
20 
21 typedef struct _LIX_TASK_OBJECT LIX_TASK_OBJECT;
22 
23 INTSTATUS
24 IntLixCredAdd(
25  _In_ QWORD CredsGva,
26  _Out_ LIX_CREDS **Creds
27  );
28 
29 void
30 IntLixCredRemove(
31  _In_ LIX_CREDS **Creds
32  );
33 
34 void
35 IntLixCredsVerify(
36  _In_ LIX_TASK_OBJECT *Task
37  );
38 
39 INTSTATUS
40 IntLixCommitCredsHandle(
41  _In_ void *Detour
42  );
43 
44 #endif // _LIXCRED_H_
_Out_
#define _Out_
Definition: intro_sal.h:22
IntLixCredsVerify
void IntLixCredsVerify(LIX_TASK_OBJECT *Task)
Verifies whether the credentials of a process has been altered or not.
Definition: lixcred.c:534
_In_
#define _In_
Definition: intro_sal.h:21
LIX_CREDS
struct _LIX_CREDS LIX_CREDS
Describes one set of credentials.
_LIX_CREDS::RefCount
DWORD RefCount
Number of processes referring this credentials set.
Definition: lixcred.h:17
INTSTATUS
int INTSTATUS
The status data type.
Definition: introstatus.h:24
IntLixCredRemove
void IntLixCredRemove(LIX_CREDS **Creds)
Removes the integrity protection for the credentials set that belong to a process.
Definition: lixcred.c:441
_LIX_CREDS::Checksum
DWORD Checksum
The CRC32 checksum.
Definition: lixcred.h:18
IntLixCommitCredsHandle
INTSTATUS IntLixCommitCredsHandle(void *Detour)
Detour handler for "commit_creds" function.
Definition: lixcred.c:694
_LIX_CREDS
Describes one set of credentials.
Definition: lixcred.h:13
QWORD
unsigned long long QWORD
Definition: intro_types.h:53
_LIX_TASK_OBJECT
Definition: lixprocess.h:38
_LIX_CREDS::Gva
QWORD Gva
Guest virtual address of the protected cred structure.
Definition: lixcred.h:16
DWORD
uint32_t DWORD
Definition: intro_types.h:49
_LIX_TASK_OBJECT::Creds
LIX_CREDS * Creds
The LIX_CREDS reference for the credentials of this process.
Definition: lixprocess.h:105
IntLixCredAdd
INTSTATUS IntLixCredAdd(QWORD CredsGva, LIX_CREDS **Creds)
Adds a cred structure in the integrity protected credentials list.
Definition: lixcred.c:365
_LIX_CREDS::Link
LIST_ENTRY Link
Linked list entry.
Definition: lixcred.h:15
_LIST_ENTRY
Definition: introlists.h:16