Bitdefender Hypervisor Memory Introspection
data Struct Reference

#include <init.h>

Data Fields

struct {
   unsigned long   hypercall
 
   unsigned long   completion
 
   unsigned long   error
 
token
 The tokens used to communicate with Intocore. More...
 
struct {
   kthread_create_on_node_fn *   kthread_create_on_node
 
   wake_up_process_fn *   wake_up_process
 
   vmalloc_exec_fn *   vmalloc_exec
 
func
 The functions used by this agent. More...
 
struct {
   unsigned long   vmalloc_size
 The size of allocation. More...
 
args
 The arguments of the agent. More...
 
struct {
   unsigned long   hypercall
 
   unsigned long   completion
 
   unsigned long   error
 
token
 The tokens used to communicate with Intocore. More...
 
struct {
   filp_open_fn *   filp_open
 
   filp_close_fn *   filp_close
 
   kernel_write_fn *   kernel_write
 
   __kernel_write_fn *   __kernel_write
 
   vmalloc_fn *   vmalloc
 
   vfree_fn *   vfree
 
   argv_split_fn *   argv_split
 
   argv_free_fn *   argv_free
 
   call_usermodehelper_setup_fn *   call_usermodehelper_setup
 
   call_usermodehelper_exec_fn *   call_usermodehelper_exec
 
   do_exit_fn *   do_exit
 
   printk_fn *   printk
 
func
 The functions used by this agent. More...
 
struct {
   unsigned long   kernel_version
 The version of the kernel. More...
 
   unsigned long   vmalloc_size
 The size of the deployed chunks. More...
 
   char   root [1]
 The root path; allways '/'. More...
 
   char   name [128]
 The name of the deployed file. More...
 
   struct {
      unsigned long   wait_proc
 The value of UMH_WAIT_PROC. More...
 
      unsigned long   wait_exec
 The value of UMH_WAIT_EXEC. More...
 
   }   umh
 
args
 The arguments of the agent. More...
 
struct {
   unsigned long   hypercall
 
   unsigned long   completion
 
   unsigned long   error
 
token
 The tokens used to communicate with Intocore. More...
 
struct {
   filp_open_fn *   filp_open
 
   filp_close_fn *   filp_close
 
   flush_delayed_fput_fn *   flush_delayed_fput
 
   kernel_write_fn *   kernel_write
 
   __kernel_write_fn *   __kernel_write
 
   vmalloc_fn *   vmalloc
 
   vfree_fn *   vfree
 
   call_usermodehelper_setup_fn *   call_usermodehelper_setup
 
   call_usermodehelper_exec_fn *   call_usermodehelper_exec
 
   argv_split_fn *   argv_split
 
   argv_free_fn *   argv_free
 
   do_exit_fn *   do_exit
 
   chmod_common_fn *   chmod_common
 
   printk_fn *   printk
 
func
 The functions used by this agent. More...
 
struct {
   unsigned long   kernel_version
 The version of the kernel. More...
 
   unsigned long   file_path_offset
 Used to store the current position in the file. More...
 
   unsigned long   vmalloc_size
 The size of the deployed chunks. More...
 
   char   root [1]
 The root path; allways '/'. More...
 
   char   name [128]
 The name of the deployed file. More...
 
   char   arg [1024]
 The arguments of the process. More...
 
   struct {
      unsigned long   wait_proc
 The value of UMH_WAIT_PROC. More...
 
      unsigned long   wait_exec
 The value of UMH_WAIT_EXEC. More...
 
   }   umh
 
args
 The arguments of the agent. More...
 
struct {
   unsigned long   hypercall
 
   unsigned long   completion
 
   unsigned long   error
 
token
 The tokens used to communicate with Intocore. More...
 
struct {
   module_alloc_fn *   module_alloc
 
   change_page_attr_set_clr_fn *   change_page_attr_set_clr
 
   vmalloc_fn *   vmalloc
 
func
 The functions used by this agent. More...
 
struct {
   unsigned long   module_alloc_size
 The size of the 'module' region to allocate. More...
 
   unsigned long   vmalloc_size
 The size of the 'vm' region to allocate. More...
 
args
 
struct {
   unsigned long   hypercall
 
   unsigned long   completion
 
   unsigned long   error
 
token
 The tokens used to communicate with Intocore. More...
 
struct {
   call_usermodehelper_setup_fn *   call_usermodehelper_setup
 
   call_usermodehelper_exec_fn *   call_usermodehelper_exec
 
   argv_split_fn *   argv_split
 
   argv_free_fn *   argv_free
 
   do_exit_fn *   do_exit
 
   vfree_fn *   vfree
 
   printk_fn *   printk
 
func
 The functions used by this agent. More...
 
struct {
   char   commnad [1024]
 The command line to be executed. More...
 
   struct {
      unsigned long   wait_proc
 The value of UMH_WAIT_PROC. More...
 
      unsigned long   wait_exec
 The value of UMH_WAIT_EXEC. More...
 
   }   umh
 
args
 The arguments of the agent. More...
 
struct {
   unsigned long   hypercall
 
   unsigned long   completion
 
   unsigned long   error
 
token
 The tokens used to communicate with Intocore. More...
 
struct {
   vfree_fn *   vfree
 
   change_page_attr_set_clr *   change_page_attr_set_clr
 
func
 The functions used by this agent. More...
 
struct {
   void *   module_alloc_ptr
 The pointer returned by 'module_alloc'. More...
 
   void *   vmalloc_ptr
 The pointer returned by 'vmalloc'. More...
 
   unsigned long   mask_clr
 The clear mask for the allocated memory region. More...
 
   unsigned long   mask_set
 The set mask for the allocated memory region. More...
 
args
 The functions used by this agent. More...
 

Detailed Description

Definition at line 11 of file kthread.c.

Field Documentation

◆ __kernel_write

__kernel_write_fn* data::__kernel_write

Definition at line 35 of file deploy.c.

Referenced by exec().

◆ arg

char data::arg[1024]

The arguments of the process.

Definition at line 58 of file exec.c.

Referenced by exec().

◆ args [1/6]

struct { ... } data::args

The arguments of the agent.

Referenced by exec(), and run().

◆ args [2/6]

struct { ... } data::args

◆ args [3/6]

struct { ... } data::args

The functions used by this agent.

◆ args [4/6]

struct { ... } data::args

The arguments of the agent.

◆ args [5/6]

struct { ... } data::args

The arguments of the agent.

◆ args [6/6]

struct { ... } data::args

The arguments of the agent.

◆ argv_free

argv_free_fn* data::argv_free

Definition at line 39 of file deploy.c.

Referenced by exec(), and run().

◆ argv_split

argv_split_fn* data::argv_split

Definition at line 38 of file deploy.c.

Referenced by exec(), and run().

◆ call_usermodehelper_exec

call_usermodehelper_exec_fn* data::call_usermodehelper_exec

Definition at line 41 of file deploy.c.

Referenced by call_usermodehelper(), exec(), and run().

◆ call_usermodehelper_setup

call_usermodehelper_setup_fn* data::call_usermodehelper_setup

Definition at line 40 of file deploy.c.

Referenced by call_usermodehelper().

◆ change_page_attr_set_clr [1/2]

change_page_attr_set_clr* data::change_page_attr_set_clr

Definition at line 24 of file uninit.h.

◆ change_page_attr_set_clr [2/2]

change_page_attr_set_clr_fn* data::change_page_attr_set_clr

Definition at line 25 of file init.h.

◆ chmod_common

chmod_common_fn* data::chmod_common

Definition at line 46 of file exec.c.

Referenced by exec().

◆ commnad

char data::commnad[1024]

The command line to be executed.

Definition at line 39 of file run.c.

Referenced by run().

◆ completion

unsigned long data::completion

Definition at line 15 of file kthread.c.

Referenced by exec(), and run().

◆ do_exit

do_exit_fn* data::do_exit

Definition at line 42 of file deploy.c.

Referenced by trampoline().

◆ error

unsigned long data::error

Definition at line 16 of file kthread.c.

Referenced by call_usermodehelper(), exec(), and run().

◆ file_path_offset

unsigned long data::file_path_offset

Used to store the current position in the file.

Definition at line 53 of file exec.c.

Referenced by exec().

◆ filp_close

filp_close_fn* data::filp_close

Definition at line 33 of file deploy.c.

Referenced by exec().

◆ filp_open

filp_open_fn* data::filp_open

Definition at line 32 of file deploy.c.

Referenced by exec().

◆ flush_delayed_fput

flush_delayed_fput_fn* data::flush_delayed_fput

Definition at line 36 of file exec.c.

Referenced by exec().

◆ func [1/6]

struct { ... } data::func

The functions used by this agent.

Referenced by call_usermodehelper(), exec(), run(), and trampoline().

◆ func [2/6]

struct { ... } data::func

The functions used by this agent.

◆ func [3/6]

struct { ... } data::func

The functions used by this agent.

◆ func [4/6]

struct { ... } data::func

The functions used by this agent.

◆ func [5/6]

struct { ... } data::func

The functions used by this agent.

◆ func [6/6]

struct { ... } data::func

The functions used by this agent.

◆ hypercall

unsigned long data::hypercall

Definition at line 14 of file kthread.c.

Referenced by exec().

◆ kernel_version

unsigned long data::kernel_version

The version of the kernel.

Definition at line 48 of file deploy.c.

Referenced by exec().

◆ kernel_write

kernel_write_fn* data::kernel_write

Definition at line 34 of file deploy.c.

Referenced by exec().

◆ kthread_create_on_node

kthread_create_on_node_fn* data::kthread_create_on_node

Definition at line 21 of file kthread.c.

◆ mask_clr

unsigned long data::mask_clr

The clear mask for the allocated memory region.

Definition at line 32 of file uninit.h.

◆ mask_set

unsigned long data::mask_set

The set mask for the allocated memory region.

Definition at line 33 of file uninit.h.

◆ module_alloc

module_alloc_fn* data::module_alloc

Definition at line 24 of file init.h.

◆ module_alloc_ptr

void* data::module_alloc_ptr

The pointer returned by 'module_alloc'.

Definition at line 29 of file uninit.h.

◆ module_alloc_size

unsigned long data::module_alloc_size

The size of the 'module' region to allocate.

Definition at line 30 of file init.h.

◆ name

char data::name[128]

The name of the deployed file.

Definition at line 52 of file deploy.c.

◆ printk

printk_fn* data::printk

Definition at line 43 of file deploy.c.

◆ root

char data::root[1]

The root path; allways '/'.

Definition at line 51 of file deploy.c.

Referenced by exec().

◆ token [1/6]

struct { ... } data::token

The tokens used to communicate with Intocore.

Referenced by breakpoint(), call_usermodehelper(), exec(), and run().

◆ token [2/6]

struct { ... } data::token

The tokens used to communicate with Intocore.

◆ token [3/6]

struct { ... } data::token

The tokens used to communicate with Intocore.

◆ token [4/6]

struct { ... } data::token

The tokens used to communicate with Intocore.

◆ token [5/6]

struct { ... } data::token

The tokens used to communicate with Intocore.

◆ token [6/6]

struct { ... } data::token

The tokens used to communicate with Intocore.

◆ umh [1/3]

struct { ... } data::umh

◆ umh [2/3]

struct { ... } data::umh

Referenced by exec(), and run().

◆ umh [3/3]

struct { ... } data::umh

◆ vfree

vfree_fn* data::vfree

Definition at line 37 of file deploy.c.

Referenced by exec(), and trampoline().

◆ vmalloc

vmalloc_fn* data::vmalloc

Definition at line 36 of file deploy.c.

Referenced by exec().

◆ vmalloc_exec

vmalloc_exec_fn* data::vmalloc_exec

Definition at line 23 of file kthread.c.

◆ vmalloc_ptr

void* data::vmalloc_ptr

The pointer returned by 'vmalloc'.

Definition at line 30 of file uninit.h.

◆ vmalloc_size

unsigned long data::vmalloc_size

The size of allocation.

The size of the 'vm' region to allocate.

The size of the deployed chunks.

Definition at line 28 of file kthread.c.

Referenced by exec().

◆ wait_exec

unsigned long data::wait_exec

The value of UMH_WAIT_EXEC.

Definition at line 56 of file deploy.c.

◆ wait_proc

unsigned long data::wait_proc

The value of UMH_WAIT_PROC.

Definition at line 55 of file deploy.c.

◆ wake_up_process

wake_up_process_fn* data::wake_up_process

Definition at line 22 of file kthread.c.


The documentation for this struct was generated from the following files: