Bitdefender Hypervisor Memory Introspection
lixstack.h
Go to the documentation of this file.
1 /*
2  * Copyright (c) 2020 Bitdefender
3  * SPDX-License-Identifier: Apache-2.0
4  */
5 #ifndef _LIXSTACK_H_
6 #define _LIXSTACK_H_
7 
8 #include "guest_stack.h"
9 
10 #define MAX_FUNC_NAME 128
11 
12 typedef struct _LIX_TASK_OBJECT LIX_TASK_OBJECT;
13 typedef struct _LIX_TRAP_FRAME LIX_TRAP_FRAME;
14 
15 INTSTATUS
16 IntLixStackTraceGet(
17  _In_opt_ QWORD Cr3,
18  _In_ QWORD Stack,
19  _In_ QWORD Rip,
20  _In_ DWORD MaxNumberOfTraces,
21  _In_ QWORD Flags,
22  _Inout_ STACK_TRACE *StackTrace
23  );
24 
25 INTSTATUS
26 IntLixStackTraceGetReg(
27  _In_opt_ QWORD Cr3,
28  _In_ PIG_ARCH_REGS Registers,
29  _In_ DWORD MaxNumberOfTraces,
30  _In_ QWORD Flags,
31  _Inout_ STACK_TRACE *StackTrace
32  );
33 
34 void
35 IntLixDumpStacktrace(
36  _In_ DWORD MaxTraces
37  );
38 
39 void
40 IntLixStackDumpUmStackTrace(
41  _In_ LIX_TASK_OBJECT *Task
42  );
43 
44 #endif //_LIXSTACK_H_
_In_opt_
#define _In_opt_
Definition: intro_sal.h:16
_In_
#define _In_
Definition: intro_sal.h:21
IntLixStackTraceGetReg
INTSTATUS IntLixStackTraceGetReg(QWORD Cr3, PIG_ARCH_REGS Registers, DWORD MaxNumberOfTraces, QWORD Flags, STACK_TRACE *StackTrace)
Retrieves a Kernel stack backtrace based on the register values.
Definition: lixstack.c:225
INTSTATUS
int INTSTATUS
The status data type.
Definition: introstatus.h:24
_LIX_TRAP_FRAME
Definition: lixddefs.h:321
_Inout_
#define _Inout_
Definition: intro_sal.h:20
QWORD
unsigned long long QWORD
Definition: intro_types.h:53
_LIX_TASK_OBJECT
Definition: lixprocess.h:38
DWORD
uint32_t DWORD
Definition: intro_types.h:49
IntLixStackDumpUmStackTrace
void IntLixStackDumpUmStackTrace(LIX_TASK_OBJECT *Task)
Logs the libraries found in the user mode stacktrace.
Definition: lixstack.c:381
IntLixStackTraceGet
INTSTATUS IntLixStackTraceGet(QWORD Cr3, QWORD Stack, QWORD Rip, DWORD MaxNumberOfTraces, QWORD Flags, STACK_TRACE *StackTrace)
Retrieves a Kernel stack trace.
Definition: lixstack.c:14
IntLixDumpStacktrace
void IntLixDumpStacktrace(DWORD MaxTraces)
Logs a Kernel stack backtrace.
Definition: lixstack.c:292
_LIX_TRAP_FRAME::Rip
QWORD Rip
Definition: lixddefs.h:346
_IG_ARCH_REGS
Holds register state.
Definition: glueiface.h:30
_STACK_TRACE
Structure that describes a stack trace.
Definition: guest_stack.h:42
guest_stack.h