Method getAllELFs

KittyMemoryEx/KittyScanner.cpp:1078–1217

std::vector<ElfScanner> ElfScannerMgr::getAllELFs(EScanElfType type, EScanElfFilter filter)
#else
std::vector<ElfScanner> ElfScannerMgr::getAllELFs()
#endif
{
    std::vector<ElfScanner> elfs;

    if (!_pMem)
        return elfs;

#ifdef __ANDROID__
    const auto progMachine = getProgramElf().header().e_machine;
    static auto eMachineCheck = [](EScanElfType type, int a, int b) -> bool {
        return a == 0 || b == 0 || type == EScanElfType::Any || (type == EScanElfType::Native && a == b) ||
               (type == EScanElfType::Emulated && a != b);
    };

    const bool isAppFilter = filter == EScanElfFilter::App;
    const bool isSysFilter = filter == EScanElfFilter::System;
#endif

    auto maps = KittyMemoryEx::getAllMaps(_pMem->processID());
    if (maps.empty())
    {
        KITTY_LOGD("GetAllELFs: Failed to get process maps.");
        return elfs;
    }

    unsigned long lastElfNode = 0;

    for (auto &it : maps)
    {
#ifdef __LP64__
        if (it.startAddress >= (0x7fffffffffff - 0x1000))
            continue;
#else
        if (it.startAddress >= (0xffffffff - 0x1000))
            continue;
#endif

        if (!it.isValid() || !it.readable || it.writeable || it.is_shared || (it.inode != 0 && it.inode == lastElfNode))
            continue;

#ifdef __ANDROID__
        if (isAppFilter)
        {
            if (it.inode == 0 || (!KittyUtils::String::startsWith(it.pathname, "/data/") &&
                                  !KittyUtils::String::startsWith(it.pathname, "/proc/") &&
                                  !KittyUtils::String::startsWith(it.pathname, "/memfd:")))
                continue;
        }
        else if (isSysFilter)
        {
            if ((it.inode == 0 && it.pathname != "[vdso]") ||
                (!KittyUtils::String::startsWith(it.pathname, "/system/") &&
                 !KittyUtils::String::startsWith(it.pathname, "/apex/")))
                continue;
        }
#endif