|
Bitdefender Hypervisor Memory Introspection
|
#include <init.h>
Data Fields | |
| struct { | |
| unsigned long hypercall | |
| unsigned long completion | |
| unsigned long error | |
| } | token |
| The tokens used to communicate with Intocore. More... | |
| struct { | |
| kthread_create_on_node_fn * kthread_create_on_node | |
| wake_up_process_fn * wake_up_process | |
| vmalloc_exec_fn * vmalloc_exec | |
| __vmalloc_node_range_fn * __vmalloc_node_range | |
| } | func |
| The functions used by this agent. More... | |
| struct { | |
| unsigned long vmalloc_size | |
| The size of allocation. More... | |
| } | args |
| The arguments of the agent. More... | |
| struct { | |
| unsigned long hypercall | |
| unsigned long completion | |
| unsigned long error | |
| } | token |
| The tokens used to communicate with Intocore. More... | |
| struct { | |
| filp_open_fn * filp_open | |
| filp_close_fn * filp_close | |
| kernel_write_fn * kernel_write | |
| __kernel_write_fn * __kernel_write | |
| vmalloc_fn * vmalloc | |
| vfree_fn * vfree | |
| argv_split_fn * argv_split | |
| argv_free_fn * argv_free | |
| call_usermodehelper_setup_fn * call_usermodehelper_setup | |
| call_usermodehelper_exec_fn * call_usermodehelper_exec | |
| do_exit_fn * do_exit | |
| printk_fn * printk | |
| } | func |
| The functions used by this agent. More... | |
| struct { | |
| unsigned long kernel_version | |
| The version of the kernel. More... | |
| unsigned long vmalloc_size | |
| The size of the deployed chunks. More... | |
| char root [1] | |
| The root path; allways '/'. More... | |
| char name [128] | |
| The name of the deployed file. More... | |
| struct { | |
| unsigned long wait_proc | |
| The value of UMH_WAIT_PROC. More... | |
| unsigned long wait_exec | |
| The value of UMH_WAIT_EXEC. More... | |
| } umh | |
| } | args |
| The arguments of the agent. More... | |
| struct { | |
| unsigned long hypercall | |
| unsigned long completion | |
| unsigned long error | |
| } | token |
| The tokens used to communicate with Intocore. More... | |
| struct { | |
| filp_open_fn * filp_open | |
| filp_close_fn * filp_close | |
| flush_delayed_fput_fn * flush_delayed_fput | |
| kernel_write_fn * kernel_write | |
| __kernel_write_fn * __kernel_write | |
| vmalloc_fn * vmalloc | |
| vfree_fn * vfree | |
| call_usermodehelper_setup_fn * call_usermodehelper_setup | |
| call_usermodehelper_exec_fn * call_usermodehelper_exec | |
| argv_split_fn * argv_split | |
| argv_free_fn * argv_free | |
| do_exit_fn * do_exit | |
| chmod_common_fn * chmod_common | |
| printk_fn * printk | |
| } | func |
| The functions used by this agent. More... | |
| struct { | |
| unsigned long kernel_version | |
| The version of the kernel. More... | |
| unsigned long file_path_offset | |
| Used to store the current position in the file. More... | |
| unsigned long vmalloc_size | |
| The size of the deployed chunks. More... | |
| char root [1] | |
| The root path; allways '/'. More... | |
| char name [128] | |
| The name of the deployed file. More... | |
| char arg [1024] | |
| The arguments of the process. More... | |
| struct { | |
| unsigned long wait_proc | |
| The value of UMH_WAIT_PROC. More... | |
| unsigned long wait_exec | |
| The value of UMH_WAIT_EXEC. More... | |
| } umh | |
| } | args |
| The arguments of the agent. More... | |
| struct { | |
| unsigned long hypercall | |
| unsigned long completion | |
| unsigned long error | |
| } | token |
| The tokens used to communicate with Intocore. More... | |
| struct { | |
| module_alloc_fn * module_alloc | |
| change_page_attr_set_clr_fn * change_page_attr_set_clr | |
| vmalloc_fn * vmalloc | |
| } | func |
| The functions used by this agent. More... | |
| struct { | |
| unsigned long module_alloc_size | |
| The size of the 'module' region to allocate. More... | |
| unsigned long vmalloc_size | |
| The size of the 'vm' region to allocate. More... | |
| } | args |
| struct { | |
| unsigned long hypercall | |
| unsigned long completion | |
| unsigned long error | |
| } | token |
| The tokens used to communicate with Intocore. More... | |
| struct { | |
| call_usermodehelper_setup_fn * call_usermodehelper_setup | |
| call_usermodehelper_exec_fn * call_usermodehelper_exec | |
| argv_split_fn * argv_split | |
| argv_free_fn * argv_free | |
| do_exit_fn * do_exit | |
| vfree_fn * vfree | |
| printk_fn * printk | |
| } | func |
| The functions used by this agent. More... | |
| struct { | |
| char commnad [1024] | |
| The command line to be executed. More... | |
| struct { | |
| unsigned long wait_proc | |
| The value of UMH_WAIT_PROC. More... | |
| unsigned long wait_exec | |
| The value of UMH_WAIT_EXEC. More... | |
| } umh | |
| } | args |
| The arguments of the agent. More... | |
| struct { | |
| unsigned long hypercall | |
| unsigned long completion | |
| unsigned long error | |
| } | token |
| The tokens used to communicate with Intocore. More... | |
| struct { | |
| vfree_fn * vfree | |
| change_page_attr_set_clr * change_page_attr_set_clr | |
| } | func |
| The functions used by this agent. More... | |
| struct { | |
| void * module_alloc_ptr | |
| The pointer returned by 'module_alloc'. More... | |
| void * vmalloc_ptr | |
| The pointer returned by 'vmalloc'. More... | |
| unsigned long mask_clr | |
| The clear mask for the allocated memory region. More... | |
| unsigned long mask_set | |
| The set mask for the allocated memory region. More... | |
| } | args |
| The functions used by this agent. More... | |
| __kernel_write_fn* data::__kernel_write |
| __vmalloc_node_range_fn* data::__vmalloc_node_range |
| char data::arg[1024] |
| struct { ... } data::args |
| struct { ... } data::args |
The functions used by this agent.
| struct { ... } data::args |
The arguments of the agent.
| struct { ... } data::args |
The arguments of the agent.
| struct { ... } data::args |
The arguments of the agent.
| argv_free_fn* data::argv_free |
| argv_split_fn* data::argv_split |
| call_usermodehelper_exec_fn* data::call_usermodehelper_exec |
Definition at line 41 of file deploy.c.
Referenced by call_usermodehelper(), exec(), and run().
| call_usermodehelper_setup_fn* data::call_usermodehelper_setup |
Definition at line 40 of file deploy.c.
Referenced by call_usermodehelper().
| change_page_attr_set_clr_fn* data::change_page_attr_set_clr |
| chmod_common_fn* data::chmod_common |
| char data::commnad[1024] |
| unsigned long data::completion |
| do_exit_fn* data::do_exit |
Definition at line 42 of file deploy.c.
Referenced by trampoline().
| unsigned long data::error |
Definition at line 19 of file kthread.c.
Referenced by call_usermodehelper(), exec(), and run().
| unsigned long data::file_path_offset |
| filp_close_fn* data::filp_close |
| filp_open_fn* data::filp_open |
| flush_delayed_fput_fn* data::flush_delayed_fput |
| struct { ... } data::func |
The functions used by this agent.
| struct { ... } data::func |
The functions used by this agent.
| struct { ... } data::func |
The functions used by this agent.
Referenced by call_usermodehelper(), exec(), run(), and trampoline().
| struct { ... } data::func |
The functions used by this agent.
| struct { ... } data::func |
The functions used by this agent.
| struct { ... } data::func |
The functions used by this agent.
| unsigned long data::kernel_version |
| kernel_write_fn* data::kernel_write |
| kthread_create_on_node_fn* data::kthread_create_on_node |
| unsigned long data::mask_clr |
| unsigned long data::mask_set |
| module_alloc_fn* data::module_alloc |
| void* data::module_alloc_ptr |
| unsigned long data::module_alloc_size |
| char data::root[1] |
| struct { ... } data::token |
The tokens used to communicate with Intocore.
| struct { ... } data::token |
The tokens used to communicate with Intocore.
Referenced by breakpoint(), call_usermodehelper(), exec(), and run().
| struct { ... } data::token |
The tokens used to communicate with Intocore.
| struct { ... } data::token |
The tokens used to communicate with Intocore.
| struct { ... } data::token |
The tokens used to communicate with Intocore.
| struct { ... } data::token |
The tokens used to communicate with Intocore.
| struct { ... } data::umh |
| struct { ... } data::umh |
| vfree_fn* data::vfree |
Definition at line 37 of file deploy.c.
Referenced by exec(), and trampoline().
| vmalloc_fn* data::vmalloc |
| vmalloc_exec_fn* data::vmalloc_exec |
| unsigned long data::vmalloc_size |
| wake_up_process_fn* data::wake_up_process |