|
Bitdefender Hypervisor Memory Introspection
|
Go to the source code of this file.
Data Structures | |
| struct | inactive_task_frame |
Macros | |
| #define | current_task |
| #define | current_cpu |
Functions | |
| def_detour_vars (commit_creds) | |
| def_detour_vars (arch_jump_label_transform) | |
| def_detour_vars (module_param_sysfs_setup) | |
| def_detour_vars (module_param_sysfs_remove) | |
| def_detour_vars (wake_up_new_task) | |
| def_detour_vars (flush_old_exec) | |
| def_detour_vars (do_exit) | |
| def_detour_vars (arch_ptrace) | |
| def_detour_vars (compat_arch_ptrace) | |
| def_detour_vars (process_vm_rw_core) | |
| def_detour_vars (__vma_link_rb) | |
| def_detour_vars (change_protection) | |
| def_detour_vars (vma_adjust) | |
| def_detour_vars (__vma_adjust) | |
| def_detour_vars (vma_rb_erase) | |
| def_detour_vars (__vma_rb_erase) | |
| def_detour_vars (expand_downwards) | |
| def_detour_vars (complete_signal) | |
| def_detour_vars (text_poke) | |
| def_detour_vars (__text_poke) | |
| def_detour_vars (ftrace_write) | |
| def_detour_vars (panic) | |
| def_detour_vars (crash_kexec) | |
| def_detour_vars (__access_remote_vm) | |
| def_detour_hijack_vars (mprotect_fixup, vma_wants_writenotify) | |
| def_detour_hijack_vars (do_munmap, rb_erase) | |
| def_detour_hijack_vars (vma_adjust, rb_erase) | |
| static __default_fn_attr bool | is_detour_enabled (DETOUR_ID id) |
| static __default_fn_attr size_t | vmcall (DETOUR_ID id) |
| __default_fn_attr char * | d_path (void *path_struct) |
| __default_fn_attr void | commit_creds (long *creds) |
| __default_fn_attr void | module_param_sysfs_setup (void *module) |
| __default_fn_attr void | module_param_sysfs_remove (void *module) |
| __default_fn_attr void | wake_up_new_task (long task) |
| __default_fn_attr int | flush_old_exec (long binprm) |
| __default_fn_attr void | do_exit (long code) |
| __default_fn_attr long | arch_ptrace (long child, long request) |
| __default_fn_attr size_t | process_vm_rw_core (int pid, void *iter, void *rvec, unsigned long riovcnt, unsigned long flags, int vm_write) |
| __default_fn_attr void | __vma_link_rb (void *mm, void *vma, void **rb_link, void *rb_parent) |
| __default_fn_attr void | change_protection (long vma, unsigned long start, unsigned long end, unsigned long newprot, int dirty_accountable, int prot_numa) |
| __default_fn_attr void | pre_vma_adjust (long vma, unsigned long start, unsigned long end, unsigned long pgoff, void *insert, void *expand, long *skip_call, long *saved_vma, long *next, long *prev) |
| __default_fn_attr void | vma_adjust (long _vma, unsigned long _start, unsigned long _end, unsigned long _pgoff, void *_insert, void *_expand, long *_skip_call, long saved_vma, long next, long prev) |
| __default_fn_attr void | vma_rb_erase (long vma, void *root) |
| __default_fn_attr void | expand_downwards (long vma, unsigned long address) |
| __default_fn_attr int | complete_signal (int sig, void *task, enum pid_type type) |
| __default_fn_attr void | text_poke (void *addr, const void *opcode, size_t len) |
| __default_fn_attr void | ftrace_write (unsigned long ip, const char *val, int size) |
| __default_fn_attr void | panic (const char *fmt) |
| __default_fn_attr void | arch_jump_label_transform (void *entry, enum jump_label_type type) |
| __default_fn_attr void | __access_remote_vm (void *task, void *mm, unsigned long addr, void *buf, int len, unsigned int gup_flags) |
| __default_fn_attr void | do_munmap_rb_erase (unsigned long vma_vm_rb, unsigned long mm_mm_rb) |
| __default_fn_attr void | vma_adjust_rb_erase (unsigned long vma_vm_rb, unsigned long mm_mm_rb) |
| __default_fn_attr void | mprotect_fixup_vma_wants_writenotify (unsigned long vma) |
| void | __asm_defines (void) |
Variables | |
| LIX_HYPERCALL_PAGE | hypercall_info |
| #define current_cpu |
Definition at line 98 of file handlers.c.
Referenced by d_path().
| #define current_task |
Definition at line 88 of file handlers.c.
Referenced by commit_creds(), do_exit(), flush_old_exec(), process_vm_rw_core(), and wake_up_new_task().
| __default_fn_attr void __access_remote_vm | ( | void * | task, |
| void * | mm, | ||
| unsigned long | addr, | ||
| void * | buf, | ||
| int | len, | ||
| unsigned int | gup_flags | ||
| ) |
Definition at line 407 of file handlers.c.
Referenced by __asm_defines().
| void __asm_defines | ( | void | ) |
Definition at line 478 of file handlers.c.
| __default_fn_attr void __vma_link_rb | ( | void * | mm, |
| void * | vma, | ||
| void ** | rb_link, | ||
| void * | rb_parent | ||
| ) |
Definition at line 241 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr void arch_jump_label_transform | ( | void * | entry, |
| enum jump_label_type | type | ||
| ) |
Definition at line 399 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr long arch_ptrace | ( | long | child, |
| long | request | ||
| ) |
Definition at line 211 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr void change_protection | ( | long | vma, |
| unsigned long | start, | ||
| unsigned long | end, | ||
| unsigned long | newprot, | ||
| int | dirty_accountable, | ||
| int | prot_numa | ||
| ) |
Definition at line 265 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr void commit_creds | ( | long * | creds | ) |
Definition at line 146 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr int complete_signal | ( | int | sig, |
| void * | task, | ||
| enum pid_type | type | ||
| ) |
Definition at line 355 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr char* d_path | ( | void * | path_struct | ) |
Definition at line 136 of file handlers.c.
Referenced by flush_old_exec().
| def_detour_hijack_vars | ( | mprotect_fixup | , |
| vma_wants_writenotify | |||
| ) |
| def_detour_hijack_vars | ( | do_munmap | , |
| rb_erase | |||
| ) |
| def_detour_hijack_vars | ( | vma_adjust | , |
| rb_erase | |||
| ) |
| def_detour_vars | ( | commit_creds | ) |
| def_detour_vars | ( | arch_jump_label_transform | ) |
| def_detour_vars | ( | module_param_sysfs_setup | ) |
| def_detour_vars | ( | module_param_sysfs_remove | ) |
| def_detour_vars | ( | wake_up_new_task | ) |
| def_detour_vars | ( | flush_old_exec | ) |
| def_detour_vars | ( | do_exit | ) |
| def_detour_vars | ( | arch_ptrace | ) |
| def_detour_vars | ( | compat_arch_ptrace | ) |
| def_detour_vars | ( | process_vm_rw_core | ) |
| def_detour_vars | ( | __vma_link_rb | ) |
| def_detour_vars | ( | change_protection | ) |
| def_detour_vars | ( | vma_adjust | ) |
| def_detour_vars | ( | __vma_adjust | ) |
| def_detour_vars | ( | vma_rb_erase | ) |
| def_detour_vars | ( | __vma_rb_erase | ) |
| def_detour_vars | ( | expand_downwards | ) |
| def_detour_vars | ( | complete_signal | ) |
| def_detour_vars | ( | text_poke | ) |
| def_detour_vars | ( | __text_poke | ) |
| def_detour_vars | ( | ftrace_write | ) |
| def_detour_vars | ( | panic | ) |
| def_detour_vars | ( | crash_kexec | ) |
| def_detour_vars | ( | __access_remote_vm | ) |
| __default_fn_attr void do_exit | ( | long | code | ) |
Definition at line 203 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr void do_munmap_rb_erase | ( | unsigned long | vma_vm_rb, |
| unsigned long | mm_mm_rb | ||
| ) |
Definition at line 420 of file handlers.c.
| __default_fn_attr void expand_downwards | ( | long | vma, |
| unsigned long | address | ||
| ) |
Definition at line 342 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr int flush_old_exec | ( | long | binprm | ) |
Definition at line 185 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr void ftrace_write | ( | unsigned long | ip, |
| const char * | val, | ||
| int | size | ||
| ) |
Definition at line 383 of file handlers.c.
Referenced by __asm_defines().
|
static |
Definition at line 109 of file handlers.c.
Referenced by vmcall().
| __default_fn_attr void module_param_sysfs_remove | ( | void * | module | ) |
Definition at line 169 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr void module_param_sysfs_setup | ( | void * | module | ) |
Definition at line 161 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr void mprotect_fixup_vma_wants_writenotify | ( | unsigned long | vma | ) |
Definition at line 452 of file handlers.c.
| __default_fn_attr void panic | ( | const char * | fmt | ) |
Definition at line 391 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr void pre_vma_adjust | ( | long | vma, |
| unsigned long | start, | ||
| unsigned long | end, | ||
| unsigned long | pgoff, | ||
| void * | insert, | ||
| void * | expand, | ||
| long * | skip_call, | ||
| long * | saved_vma, | ||
| long * | next, | ||
| long * | prev | ||
| ) |
Definition at line 293 of file handlers.c.
| __default_fn_attr size_t process_vm_rw_core | ( | int | pid, |
| void * | iter, | ||
| void * | rvec, | ||
| unsigned long | riovcnt, | ||
| unsigned long | flags, | ||
| int | vm_write | ||
| ) |
Definition at line 228 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr void text_poke | ( | void * | addr, |
| const void * | opcode, | ||
| size_t | len | ||
| ) |
Definition at line 374 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr void vma_adjust | ( | long | _vma, |
| unsigned long | _start, | ||
| unsigned long | _end, | ||
| unsigned long | _pgoff, | ||
| void * | _insert, | ||
| void * | _expand, | ||
| long * | _skip_call, | ||
| long | saved_vma, | ||
| long | next, | ||
| long | prev | ||
| ) |
Definition at line 314 of file handlers.c.
Referenced by __asm_defines().
| __default_fn_attr void vma_adjust_rb_erase | ( | unsigned long | vma_vm_rb, |
| unsigned long | mm_mm_rb | ||
| ) |
Definition at line 436 of file handlers.c.
| __default_fn_attr void vma_rb_erase | ( | long | vma, |
| void * | root | ||
| ) |
Definition at line 328 of file handlers.c.
Referenced by __asm_defines().
|
static |
Definition at line 117 of file handlers.c.
Referenced by IntDetEnableHypercall(), and panic().
| __default_fn_attr void wake_up_new_task | ( | long | task | ) |
Definition at line 177 of file handlers.c.
Referenced by __asm_defines().
| LIX_HYPERCALL_PAGE hypercall_info |
Definition at line 50 of file handlers.c.
Referenced by __vma_link_rb(), change_protection(), commit_creds(), d_path(), do_munmap_rb_erase(), expand_downwards(), flush_old_exec(), is_detour_enabled(), mprotect_fixup_vma_wants_writenotify(), pre_vma_adjust(), vma_adjust(), vma_adjust_rb_erase(), and vma_rb_erase().