Bitdefender Hypervisor Memory Introspection
winumpath.h
Go to the documentation of this file.
1 /*
2  * Copyright (c) 2020 Bitdefender
3  * SPDX-License-Identifier: Apache-2.0
4  */
5 #ifndef _WINUMPATH_H_
6 #define _WINUMPATH_H_
7 
8 #include "introcrt.h"
9 
13 typedef struct _WINUM_PATH
14 {
15  RBNODE RbNode;
16 
17  WCHAR *Path;
18  WCHAR *Name;
19 
20  DWORD PathSize;
21  DWORD NameSize;
22 
23  DWORD NameHash;
24 
26  INT32 RefCount;
27 
29  QWORD SubsectionGva;
30 
31 } WINUM_PATH, *PWINUM_PATH;
32 
33 
34 WINUM_PATH *
35 IntWinUmPathCreate(
36  _In_ const WCHAR *Path,
37  _In_ DWORD PathSize,
38  _In_ QWORD SubsectionGva
39  );
40 
41 WINUM_PATH *
42 IntWinUmPathReference(
43  _In_ WINUM_PATH *Path
44  );
45 
46 void
47 IntWinUmPathDereference(
48  _Inout_ WINUM_PATH **Path
49  );
50 
51 WINUM_PATH *
52 IntWinUmPathFetchAndReferenceBySubsection(
53  _In_ QWORD SubsectionGva
54  );
55 
56 #endif // _WINUMPATH_H_
57 
_In_
#define _In_
Definition: intro_sal.h:21
IntWinUmPathFetchAndReferenceBySubsection
WINUM_PATH * IntWinUmPathFetchAndReferenceBySubsection(QWORD SubsectionGva)
Fetches a WINUM_PATH object by the unique identifier and increments the reference counter on it...
Definition: winumpath.c:314
_WINUM_PATH::NameSize
DWORD NameSize
The number of bytes in the name string.
Definition: winumpath.h:21
_RBNODE
Definition: rbtree.h:34
INT32
int32_t INT32
Definition: intro_types.h:44
_WINUM_PATH::PathSize
DWORD PathSize
The number of bytes in the path string.
Definition: winumpath.h:20
IntWinUmPathDereference
void IntWinUmPathDereference(WINUM_PATH **Path)
Dereferences a WINUM_PATH object, releasing the resources if the reference count has reached 0...
Definition: winumpath.c:340
_Inout_
#define _Inout_
Definition: intro_sal.h:20
QWORD
unsigned long long QWORD
Definition: intro_types.h:53
_WINUM_PATH::SubsectionGva
QWORD SubsectionGva
The subsection guest virtual address from where the path was read. Serves as an unique identifier...
Definition: winumpath.h:29
_WINUM_PATH
Definition: winumpath.h:13
IntWinUmPathReference
WINUM_PATH * IntWinUmPathReference(WINUM_PATH *Path)
Increases the reference count of the given WINUM_PATH object.
Definition: winumpath.c:292
_WINUM_PATH::NameHash
DWORD NameHash
The CRC32 hash of the name. Used for fast matching.
Definition: winumpath.h:23
WCHAR
uint16_t WCHAR
Definition: intro_types.h:63
DWORD
uint32_t DWORD
Definition: intro_types.h:49
PWINUM_PATH
struct _WINUM_PATH * PWINUM_PATH
IntWinUmPathCreate
WINUM_PATH * IntWinUmPathCreate(const WCHAR *Path, DWORD PathSize, QWORD SubsectionGva)
Creates a WINUM_PATH object from the given parameters.
Definition: winumpath.c:184
_WINUM_PATH::Name
WCHAR * Name
The name of the module contained in the path.
Definition: winumpath.h:18
_WINUM_PATH::RbNode
RBNODE RbNode
The node which is inserted into gPaths tree.
Definition: winumpath.h:15
WINUM_PATH
struct _WINUM_PATH WINUM_PATH
_WINUM_PATH::RefCount
INT32 RefCount
The reference count of the current object. When reaching 0, the path will be freed.
Definition: winumpath.h:26
_WINUM_PATH::Path
WCHAR * Path
The string which represents the user-mode module path.
Definition: winumpath.h:17