Bitdefender Hypervisor Memory Introspection
Data Fields
_EXCEPTIONS Struct Reference

Describes the internal exceptions data. More...

#include <exceptions.h>

Data Fields

LIST_HEAD GenericKernelExceptions
 Linked list used for kernel-mode exceptions that have a generic originator (*). More...
 
LIST_HEAD GenericUserExceptions
 Linked list used for user-mode exceptions that have a generic originator(*). More...
 
LIST_HEAD GenericKernelUserExceptions
 Linked list used for kernel-user mode exceptions that have a generic originator(*). More...
 
LIST_HEAD NoNameKernelExceptions
 Linked list used for kernel-mode exceptions that don't have a valid originator (-). More...
 
LIST_HEAD NoNameUserExceptions
 Linked list used for user-mode exceptions that don't have a valid originator (-). More...
 
LIST_HEAD NoNameKernelUserExceptions
 Linked list used for kernel-user mode exceptions that don't have a valid originator (-). More...
 
LIST_HEAD GlobUserExceptions
 Linked list used for user-mode exceptions that contains glob content. More...
 
LIST_HEAD KernelExceptions [EXCEPTION_TABLE_SIZE]
 Array of linked lists used for kernel-mode exceptions. More...
 
LIST_HEAD KernelUserExceptions [EXCEPTION_TABLE_SIZE]
 Array of linked lists used for kernel-user mode exceptions. More...
 
LIST_HEAD UserExceptions [EXCEPTION_TABLE_SIZE]
 Array of linked lists used for user-mode exceptions. More...
 
LIST_HEAD ProcessCreationExceptions
 Linked list used for process creations exceptions. More...
 
LIST_HEAD UserFeedbackExceptions
 Linked list used for user-mode exceptions that have the feedback flag. More...
 
LIST_HEAD KernelFeedbackExceptions
 Linked list used for kernel-mode exceptions that have the feedback flag. More...
 
LIST_HEAD KernelUserFeedbackExceptions
 Linked list used for kernel-user mode exceptions that have the feedback flag. More...
 
LIST_HEAD ProcessCreationFeedbackExceptions
 Linked list used for process-creation exceptions that have the feedback flag. More...
 
LIST_HEAD ProcessCreationAlertExceptions
 Linked list used for process-creation exceptions that are added from alert. More...
 
LIST_HEAD UserAlertExceptions
 Linked list used for user-mode exceptions that are added from alert. More...
 
LIST_HEAD KernelAlertExceptions
 Linked list used for kernel-mode exceptions that are added from alert. More...
 
LIST_HEAD KernelUserAlertExceptions
 Linked list used for kernel-user mode exceptions that are added from alert. More...
 
LIST_HEAD CbSignatures
 Linked list used for codeblocks signatures. More...
 
LIST_HEAD ExportSignatures
 Linked list used for export signatures. More...
 
LIST_HEAD ValueSignatures
 Linked list used for value signatures. More...
 
LIST_HEAD ValueCodeSignatures
 Linked list used for value-code signatures. More...
 
LIST_HEAD IdtSignatures
 Linked list used for IDT signatures. More...
 
LIST_HEAD VersionOsSignatures
 Linked list used for operating system version signatures. More...
 
LIST_HEAD VersionIntroSignatures
 Linked list used for introspection version signatures. More...
 
LIST_HEAD ProcessCreationSignatures
 Linked list used for process-creation signatures. More...
 
struct {
   DWORD   Build
 
   WORD   Major
 
   WORD   Minor
 
} Version
 Loaded exceptions binary version. More...
 
BOOLEAN Loaded
 True if the exceptions are loaded. More...
 

Detailed Description

Describes the internal exceptions data.

Definition at line 86 of file exceptions.h.

Field Documentation

◆ Build

DWORD _EXCEPTIONS::Build

Definition at line 141 of file exceptions.h.

Referenced by IntAlertFillVersionInfo(), IntExceptRemove(), IntUpdateGetVersion(), and IntUpdateLoadExceptions().

◆ CbSignatures

LIST_HEAD _EXCEPTIONS::CbSignatures

Linked list used for codeblocks signatures.

Definition at line 130 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptAlertRemove(), IntExceptInit(), IntExceptRemove(), IntExceptVerifyCodeBlocksSig(), IntUpdateAddCbSignature(), IntUpdateAddKmException(), IntUpdateAddKmUmException(), IntUpdateAddUmException(), IntUpdateIsDuplicateCbSignature(), IntUpdateRemoveSignaturesForException(), and IntUpdateSetIdForException().

◆ ExportSignatures

LIST_HEAD _EXCEPTIONS::ExportSignatures

Linked list used for export signatures.

Definition at line 131 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptAlertRemove(), IntExceptInit(), IntExceptRemove(), IntExceptVerifyExportSig(), IntUpdateAddExportSignature(), IntUpdateAddUmException(), IntUpdateIsDuplicateExportSignature(), IntUpdateRemoveSignaturesForException(), and IntUpdateSetIdForException().

◆ GenericKernelExceptions

LIST_HEAD _EXCEPTIONS::GenericKernelExceptions

Linked list used for kernel-mode exceptions that have a generic originator (*).

Definition at line 89 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptInit(), IntExceptKernel(), IntExceptRemove(), and IntUpdateAddKernelException().

◆ GenericKernelUserExceptions

LIST_HEAD _EXCEPTIONS::GenericKernelUserExceptions

Linked list used for kernel-user mode exceptions that have a generic originator(*).

Definition at line 94 of file exceptions.h.

Referenced by IntExceptInit(), IntExceptKernelUser(), IntExceptRemove(), and IntUpdateAddKernelUserException().

◆ GenericUserExceptions

LIST_HEAD _EXCEPTIONS::GenericUserExceptions

Linked list used for user-mode exceptions that have a generic originator(*).

Definition at line 91 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptInit(), IntExceptRemove(), IntExceptUser(), and IntUpdateAddUserException().

◆ GlobUserExceptions

LIST_HEAD _EXCEPTIONS::GlobUserExceptions

Linked list used for user-mode exceptions that contains glob content.

Definition at line 105 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptInit(), IntExceptRemove(), IntExceptUser(), and IntUpdateAddUserExceptionGlob().

◆ IdtSignatures

LIST_HEAD _EXCEPTIONS::IdtSignatures

Linked list used for IDT signatures.

Definition at line 134 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptAlertRemove(), IntExceptInit(), IntExceptRemove(), IntExceptVerifyIdtSignature(), IntUpdateAddIdtSignature(), IntUpdateAddKmException(), IntUpdateIsDuplicateIdtSignature(), IntUpdateRemoveSignaturesForException(), and IntUpdateSetIdForException().

◆ KernelAlertExceptions

LIST_HEAD _EXCEPTIONS::KernelAlertExceptions

Linked list used for kernel-mode exceptions that are added from alert.

Definition at line 126 of file exceptions.h.

Referenced by IntExceptAlertRemove(), IntExceptInit(), IntExceptKernel(), IntUpdateAddKernelExceptionInOrder(), IntUpdateAssignAlertSignatureIds(), IntUpdateIsDuplicateKernelException(), and IntUpdateRemoveException().

◆ KernelExceptions

LIST_HEAD _EXCEPTIONS::KernelExceptions[EXCEPTION_TABLE_SIZE]

Array of linked lists used for kernel-mode exceptions.

Definition at line 107 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptInit(), IntExceptKernel(), IntExceptRemove(), and IntUpdateAddKernelException().

◆ KernelFeedbackExceptions

LIST_HEAD _EXCEPTIONS::KernelFeedbackExceptions

Linked list used for kernel-mode exceptions that have the feedback flag.

Definition at line 115 of file exceptions.h.

Referenced by IntExceptInit(), IntExceptKernel(), IntExceptRemove(), and IntUpdateAddKernelException().

◆ KernelUserAlertExceptions

LIST_HEAD _EXCEPTIONS::KernelUserAlertExceptions

Linked list used for kernel-user mode exceptions that are added from alert.

Definition at line 128 of file exceptions.h.

Referenced by IntExceptAlertRemove(), IntExceptInit(), IntExceptKernelUser(), IntUpdateAddKernelUserExceptionInOrder(), and IntUpdateIsDuplicateKernelUserException().

◆ KernelUserExceptions

LIST_HEAD _EXCEPTIONS::KernelUserExceptions[EXCEPTION_TABLE_SIZE]

Array of linked lists used for kernel-user mode exceptions.

Definition at line 108 of file exceptions.h.

Referenced by IntExceptInit(), IntExceptKernelUser(), IntExceptRemove(), and IntUpdateAddKernelUserException().

◆ KernelUserFeedbackExceptions

LIST_HEAD _EXCEPTIONS::KernelUserFeedbackExceptions

Linked list used for kernel-user mode exceptions that have the feedback flag.

Definition at line 117 of file exceptions.h.

Referenced by IntExceptInit(), IntExceptKernelUser(), IntExceptRemove(), and IntUpdateAddKernelUserException().

◆ Loaded

BOOLEAN _EXCEPTIONS::Loaded

True if the exceptions are loaded.

Definition at line 146 of file exceptions.h.

Referenced by IntExcept(), IntExceptInit(), IntExceptRemove(), IntExceptUser(), IntUpdateAreExceptionsLoaded(), IntUpdateGetVersion(), and IntUpdateLoadExceptions().

◆ Major

WORD _EXCEPTIONS::Major

Definition at line 142 of file exceptions.h.

Referenced by IntAlertFillVersionInfo(), IntExceptRemove(), IntUpdateGetVersion(), and IntUpdateLoadExceptions().

◆ Minor

WORD _EXCEPTIONS::Minor

Definition at line 143 of file exceptions.h.

Referenced by IntAlertFillVersionInfo(), IntExceptRemove(), IntUpdateGetVersion(), and IntUpdateLoadExceptions().

◆ NoNameKernelExceptions

LIST_HEAD _EXCEPTIONS::NoNameKernelExceptions

Linked list used for kernel-mode exceptions that don't have a valid originator (-).

Definition at line 97 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptInit(), IntExceptKernel(), IntExceptRemove(), IntUpdateAddKernelException(), and IntUpdateAddKernelUserException().

◆ NoNameKernelUserExceptions

LIST_HEAD _EXCEPTIONS::NoNameKernelUserExceptions

Linked list used for kernel-user mode exceptions that don't have a valid originator (-).

Definition at line 102 of file exceptions.h.

Referenced by IntExceptInit(), IntExceptKernelUser(), and IntExceptRemove().

◆ NoNameUserExceptions

LIST_HEAD _EXCEPTIONS::NoNameUserExceptions

Linked list used for user-mode exceptions that don't have a valid originator (-).

Definition at line 99 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptInit(), IntExceptRemove(), IntExceptUser(), and IntUpdateAddUserException().

◆ ProcessCreationAlertExceptions

LIST_HEAD _EXCEPTIONS::ProcessCreationAlertExceptions

Linked list used for process-creation exceptions that are added from alert.

Definition at line 122 of file exceptions.h.

Referenced by IntExceptAlertRemove(), IntExceptInit(), IntExceptUser(), IntUpdateAddUserExceptionInOrder(), IntUpdateAssignAlertSignatureIds(), IntUpdateIsDuplicateUserException(), and IntUpdateRemoveException().

◆ ProcessCreationExceptions

LIST_HEAD _EXCEPTIONS::ProcessCreationExceptions

Linked list used for process creations exceptions.

Definition at line 110 of file exceptions.h.

Referenced by IntExceptInit(), IntExceptRemove(), IntExceptUser(), and IntUpdateAddUserException().

◆ ProcessCreationFeedbackExceptions

LIST_HEAD _EXCEPTIONS::ProcessCreationFeedbackExceptions

Linked list used for process-creation exceptions that have the feedback flag.

Definition at line 119 of file exceptions.h.

Referenced by IntExceptInit(), IntExceptRemove(), IntExceptUser(), and IntUpdateAddUserException().

◆ ProcessCreationSignatures

LIST_HEAD _EXCEPTIONS::ProcessCreationSignatures

Linked list used for process-creation signatures.

Definition at line 137 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptAlertRemove(), IntExceptInit(), IntExceptRemove(), IntExceptVerifyProcessCreationSignature(), IntUpdateAddProcessCreationSignature(), and IntUpdateAddUmException().

◆ UserAlertExceptions

LIST_HEAD _EXCEPTIONS::UserAlertExceptions

Linked list used for user-mode exceptions that are added from alert.

Definition at line 124 of file exceptions.h.

Referenced by IntExceptAlertRemove(), IntExceptInit(), IntExceptUser(), IntUpdateAddUserExceptionInOrder(), IntUpdateAssignAlertSignatureIds(), IntUpdateIsDuplicateUserException(), and IntUpdateRemoveException().

◆ UserExceptions

LIST_HEAD _EXCEPTIONS::UserExceptions[EXCEPTION_TABLE_SIZE]

Array of linked lists used for user-mode exceptions.

Definition at line 109 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptInit(), IntExceptRemove(), IntExceptUser(), and IntUpdateAddUserException().

◆ UserFeedbackExceptions

LIST_HEAD _EXCEPTIONS::UserFeedbackExceptions

Linked list used for user-mode exceptions that have the feedback flag.

Definition at line 113 of file exceptions.h.

Referenced by IntExceptInit(), IntExceptRemove(), IntExceptUser(), and IntUpdateAddUserException().

◆ ValueCodeSignatures

LIST_HEAD _EXCEPTIONS::ValueCodeSignatures

Linked list used for value-code signatures.

Definition at line 133 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptInit(), IntExceptRemove(), IntExceptVerifyValueCodeSig(), and IntUpdateAddValueCodeSignature().

◆ ValueSignatures

LIST_HEAD _EXCEPTIONS::ValueSignatures

Linked list used for value signatures.

Definition at line 132 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptInit(), IntExceptRemove(), IntExceptVerifyValueSig(), and IntUpdateAddValueSignature().

◆ Version

struct { ... } _EXCEPTIONS::Version

Loaded exceptions binary version.

Referenced by IntAlertFillVersionInfo(), IntExceptRemove(), IntUpdateGetVersion(), and IntUpdateLoadExceptions().

◆ VersionIntroSignatures

LIST_HEAD _EXCEPTIONS::VersionIntroSignatures

Linked list used for introspection version signatures.

Definition at line 136 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptInit(), IntExceptRemove(), IntExceptVerifyVersionIntroSignature(), and IntUpdateAddVersionIntroSignature().

◆ VersionOsSignatures

LIST_HEAD _EXCEPTIONS::VersionOsSignatures

Linked list used for operating system version signatures.

Definition at line 135 of file exceptions.h.

Referenced by DbgDumpExceptions(), IntExceptInit(), IntExceptRemove(), IntExceptVerifyVersionOsSignature(), and IntUpdateAddVersionOsSignature().

The documentation for this struct was generated from the following file: