Bitdefender Hypervisor Memory Introspection
_KALLSYMS_BUFFERS Struct Reference

Describes the structure of the internal kallsyms buffers and other data required for the semantic reconstruction. More...

Data Fields

QWORD RelativeBase
 
union {
   QWORD   Addresses
 The guest virtual address of Addresses table. More...
 
   QWORD   Indexes
 The guest virtual address of Indexes table. More...
 
}; 
 
INT32 NumberOfNames
 The number of symbols available in kallsyms. More...
 
QWORD Names
 The guest virtual address of the names table. More...
 
char * NamesBuffer
 The internal name cache used for a faster symbol lookup. More...
 
DWORD NamesBufferSize
 The size of NamesBuffer. More...
 
union {
   QWORD *   AddressesBuffer
 The internal addresses buffer. More...
 
   INT32 *   IndexesBuffer
 The Internal indexes buffer. More...
 
}; 
 
char * TokenTable
 The internal tokens table. More...
 
DWORD TokenTableSize
 The size of the internal tokens table. More...
 
WORD TokenIndex [KSYM_TOKEN_ARRAY_CACHE_SIZE]
 The tokens array cached internally. More...
 
BOOLEAN Initialized
 The flag that marks whether the kallsyms module is initialized or not. More...
 

Detailed Description

Describes the structure of the internal kallsyms buffers and other data required for the semantic reconstruction.

Definition at line 19 of file lixksym.c.

Field Documentation

◆ @270

union { ... }

Guest virtual address of either Indexes table (for kernels compiled with CONFIG_KALLSYMS_BASE_RELATIVE) or Addresses table (for those kernels compile without the previously mentioned flag).

◆ @272

union { ... }

◆ Addresses

QWORD _KALLSYMS_BUFFERS::Addresses

The guest virtual address of Addresses table.

Definition at line 29 of file lixksym.c.

Referenced by IntKsymInit(), and IntKsymInitAbsolute().

◆ AddressesBuffer

QWORD* _KALLSYMS_BUFFERS::AddressesBuffer

The internal addresses buffer.

Definition at line 41 of file lixksym.c.

Referenced by IntKsymGetAddress(), IntKsymInit(), and IntKsymUninit().

◆ Indexes

QWORD _KALLSYMS_BUFFERS::Indexes

The guest virtual address of Indexes table.

Definition at line 30 of file lixksym.c.

Referenced by IntKsymInit(), and IntKsymRelativeFindOffsetTableEnd().

◆ IndexesBuffer

INT32* _KALLSYMS_BUFFERS::IndexesBuffer

The Internal indexes buffer.

Definition at line 42 of file lixksym.c.

Referenced by IntKsymGetAddress().

◆ Initialized

BOOLEAN _KALLSYMS_BUFFERS::Initialized

The flag that marks whether the kallsyms module is initialized or not.

Definition at line 50 of file lixksym.c.

Referenced by IntKsymFindByAddress(), IntKsymFindByName(), IntKsymInit(), and IntKsymUninit().

◆ Names

QWORD _KALLSYMS_BUFFERS::Names

The guest virtual address of the names table.

Definition at line 34 of file lixksym.c.

Referenced by IntKsymInit(), IntKsymInitAbsolute(), and IntKsymRelativeFindOffsetTableEnd().

◆ NamesBuffer

char* _KALLSYMS_BUFFERS::NamesBuffer

The internal name cache used for a faster symbol lookup.

Definition at line 36 of file lixksym.c.

Referenced by IntKsymExpandSymbol(), IntKsymInit(), and IntKsymUninit().

◆ NamesBufferSize

DWORD _KALLSYMS_BUFFERS::NamesBufferSize

The size of NamesBuffer.

Definition at line 37 of file lixksym.c.

Referenced by IntKsymExpandSymbol(), and IntKsymInit().

◆ NumberOfNames

INT32 _KALLSYMS_BUFFERS::NumberOfNames

The number of symbols available in kallsyms.

Definition at line 33 of file lixksym.c.

Referenced by IntKsymFindByAddress(), IntKsymFindByName(), IntKsymFindNamesTableEnd(), IntKsymInit(), IntKsymInitAbsolute(), and IntKsymRelativeFindOffsetTableEnd().

◆ RelativeBase

QWORD _KALLSYMS_BUFFERS::RelativeBase

The relative base for relative indexes. This has to have the same value as gGuest.KernelVA.

Definition at line 22 of file lixksym.c.

Referenced by IntKsymGetAddress(), IntKsymInit(), and IntKsymRelativeFindOffsetTableEnd().

◆ TokenIndex

WORD _KALLSYMS_BUFFERS::TokenIndex[KSYM_TOKEN_ARRAY_CACHE_SIZE]

The tokens array cached internally.

Definition at line 48 of file lixksym.c.

Referenced by IntKsymExpandSymbol(), and IntKsymInit().

◆ TokenTable

char* _KALLSYMS_BUFFERS::TokenTable

The internal tokens table.

Definition at line 45 of file lixksym.c.

Referenced by IntKsymExpandSymbol(), IntKsymInit(), and IntKsymUninit().

◆ TokenTableSize

DWORD _KALLSYMS_BUFFERS::TokenTableSize

The size of the internal tokens table.

Definition at line 46 of file lixksym.c.

Referenced by IntKsymExpandSymbol(), and IntKsymInit().


The documentation for this struct was generated from the following file: