Bitdefender Hypervisor Memory Introspection
|
Describes the structure of the internal kallsyms buffers and other data required for the semantic reconstruction. More...
Data Fields | |
QWORD | RelativeBase |
union { | |
QWORD Addresses | |
The guest virtual address of Addresses table. More... | |
QWORD Indexes | |
The guest virtual address of Indexes table. More... | |
}; | |
INT32 | NumberOfNames |
The number of symbols available in kallsyms. More... | |
QWORD | Names |
The guest virtual address of the names table. More... | |
char * | NamesBuffer |
The internal name cache used for a faster symbol lookup. More... | |
DWORD | NamesBufferSize |
The size of NamesBuffer. More... | |
union { | |
QWORD * AddressesBuffer | |
The internal addresses buffer. More... | |
INT32 * IndexesBuffer | |
The Internal indexes buffer. More... | |
}; | |
char * | TokenTable |
The internal tokens table. More... | |
DWORD | TokenTableSize |
The size of the internal tokens table. More... | |
WORD | TokenIndex [KSYM_TOKEN_ARRAY_CACHE_SIZE] |
The tokens array cached internally. More... | |
BOOLEAN | Initialized |
The flag that marks whether the kallsyms module is initialized or not. More... | |
Describes the structure of the internal kallsyms buffers and other data required for the semantic reconstruction.
union { ... } |
Guest virtual address of either Indexes table (for kernels compiled with CONFIG_KALLSYMS_BASE_RELATIVE) or Addresses table (for those kernels compile without the previously mentioned flag).
union { ... } |
QWORD _KALLSYMS_BUFFERS::Addresses |
The guest virtual address of Addresses table.
Definition at line 29 of file lixksym.c.
Referenced by IntKsymInit(), and IntKsymInitAbsolute().
QWORD* _KALLSYMS_BUFFERS::AddressesBuffer |
The internal addresses buffer.
Definition at line 41 of file lixksym.c.
Referenced by IntKsymGetAddress(), IntKsymInit(), and IntKsymUninit().
QWORD _KALLSYMS_BUFFERS::Indexes |
The guest virtual address of Indexes table.
Definition at line 30 of file lixksym.c.
Referenced by IntKsymInit(), and IntKsymRelativeFindOffsetTableEnd().
INT32* _KALLSYMS_BUFFERS::IndexesBuffer |
The Internal indexes buffer.
Definition at line 42 of file lixksym.c.
Referenced by IntKsymGetAddress().
BOOLEAN _KALLSYMS_BUFFERS::Initialized |
The flag that marks whether the kallsyms module is initialized or not.
Definition at line 50 of file lixksym.c.
Referenced by IntKsymFindByAddress(), IntKsymFindByName(), IntKsymInit(), and IntKsymUninit().
QWORD _KALLSYMS_BUFFERS::Names |
The guest virtual address of the names table.
Definition at line 34 of file lixksym.c.
Referenced by IntKsymInit(), IntKsymInitAbsolute(), and IntKsymRelativeFindOffsetTableEnd().
char* _KALLSYMS_BUFFERS::NamesBuffer |
The internal name cache used for a faster symbol lookup.
Definition at line 36 of file lixksym.c.
Referenced by IntKsymExpandSymbol(), IntKsymInit(), and IntKsymUninit().
DWORD _KALLSYMS_BUFFERS::NamesBufferSize |
The size of NamesBuffer.
Definition at line 37 of file lixksym.c.
Referenced by IntKsymExpandSymbol(), and IntKsymInit().
INT32 _KALLSYMS_BUFFERS::NumberOfNames |
The number of symbols available in kallsyms.
Definition at line 33 of file lixksym.c.
Referenced by IntKsymFindByAddress(), IntKsymFindByName(), IntKsymFindNamesTableEnd(), IntKsymInit(), IntKsymInitAbsolute(), and IntKsymRelativeFindOffsetTableEnd().
QWORD _KALLSYMS_BUFFERS::RelativeBase |
The relative base for relative indexes. This has to have the same value as gGuest.KernelVA.
Definition at line 22 of file lixksym.c.
Referenced by IntKsymGetAddress(), IntKsymInit(), and IntKsymRelativeFindOffsetTableEnd().
WORD _KALLSYMS_BUFFERS::TokenIndex[KSYM_TOKEN_ARRAY_CACHE_SIZE] |
The tokens array cached internally.
Definition at line 48 of file lixksym.c.
Referenced by IntKsymExpandSymbol(), and IntKsymInit().
char* _KALLSYMS_BUFFERS::TokenTable |
The internal tokens table.
Definition at line 45 of file lixksym.c.
Referenced by IntKsymExpandSymbol(), IntKsymInit(), and IntKsymUninit().
DWORD _KALLSYMS_BUFFERS::TokenTableSize |
The size of the internal tokens table.
Definition at line 46 of file lixksym.c.
Referenced by IntKsymExpandSymbol(), and IntKsymInit().