virtualm

Documentation

Index

• Constants
• func BuildAssertReqHandler() []plugin.ReqHandler
• type AdjustVmaEvent
• type MapVmaEvent
• type MprotectFixupEvent
• type ShiftVmaEvent
• type VMEvent
• type VMIndicatrixEvent
  • func NewVMIndicatricesEvent(indicatrices map[string]uint64) *VMIndicatrixEvent
  • func NewVMIndicatrixEvent(desc string, addr uint64) *VMIndicatrixEvent
• type Vma
  • func BuildVma(start uint64, end uint64, flag uint64, offset uint64, mappedFile string) Vma
  • func (v Vma) AttrSerialize() string
  • func (v Vma) Show() string

Constants

const (
	AnonymousMap = ""
	HeapMap      = "[heap]"
	StackMap     = "[stack]"
)

const (
	VmaFlag = "_VMA_"
)

Functions

func BuildAssertReqHandler

func BuildAssertReqHandler() []plugin.ReqHandler

Types

type AdjustVmaEvent

type AdjustVmaEvent struct {
	VmaStart    uint64
	VmaEnd      uint64
	AdjustStart uint64
	AdjustEnd   uint64
}

AdjustVmaEvent simulate `__vma_adjust`, but just change vma region, ignore operation about insert and expand

type MapVmaEvent

type MapVmaEvent struct {
	NewVma Vma
}

MapVmaEvent 映射事件

type MprotectFixupEvent

type MprotectFixupEvent struct {
	Start uint64 // region start
	End   uint64 // region end
	Flags uint64 // new flags
}

MprotectFixupEvent simulate `mprotect_fixup` behavior

type ShiftVmaEvent

type ShiftVmaEvent struct {
	TgtVma Vma
	Shift  uint64
}

ShiftVmaEvent simulate `shift_arg_pages`, but just change vma region

type VMEvent

type VMEvent interface {
	// contains filtered or unexported methods
}

VmEvent 事件

type VMIndicatrixEvent

type VMIndicatrixEvent struct {
	// contains filtered or unexported fields
}

func NewVMIndicatricesEvent

func NewVMIndicatricesEvent(indicatrices map[string]uint64) *VMIndicatrixEvent

func NewVMIndicatrixEvent

func NewVMIndicatrixEvent(desc string, addr uint64) *VMIndicatrixEvent

type Vma

type Vma struct {
	Class      vmaClass `json:"kind"`
	Start      uint64   `json:"start"`
	End        uint64   `json:"end"`
	Flags      uint64   `json:"flag"`
	Offset     uint64   `json:"offset"`
	MappedFile string   `json:"file"`
	Attr       string   `json:"attr"`
}

Vma BuildVma 结构体

func BuildVma

func BuildVma(start uint64, end uint64, flag uint64, offset uint64, mappedFile string) Vma

BuildVma 创建 VMA, mappedFile 可选值：文件名称、AnonymousMap、HeapMap、StackMap、VvarMap、Vsyscall

func (Vma) AttrSerialize

func (v Vma) AttrSerialize() string

AttrSerialize 获取权限

func (Vma) Show

func (v Vma) Show() string

Show 序列化显示，仿 /proc/xxx/maps