Method scanMemoryAreaForDebugOffsets

src/pystack/_pystack/process.cpp:410–442

}

remote_addr_t
AbstractProcessManager::scanMemoryAreaForDebugOffsets(const VirtualMap& map) const
{
    size_t size = map.Size();
    std::vector<char> memory_buffer(size);
    remote_addr_t base = map.Start();
    copyMemoryFromProcess(base, size, memory_buffer.data());

    LOG(INFO) << std::showbase << std::hex << "Searching for debug offsets in memory area spanning from "
              << map.Start() << " to " << map.End();

    uint64_t* lower_bound = (uint64_t*)&memory_buffer.data()[0];
    uint64_t* upper_bound = (uint64_t*)&memory_buffer.data()[size];

    uint64_t cookie;
    memcpy(&cookie, "xdebugpy", sizeof(cookie));

    for (uint64_t* raddr = lower_bound; raddr < upper_bound; raddr++) {
        if (raddr[0] == cookie) {
            uint64_t version = raddr[1];

            ParsedPyVersion parsed;
            if (parsePyVersionHex(version, parsed) && parsed.major == 3 && parsed.minor >= 13) {
                auto offset = (remote_addr_t)raddr - (remote_addr_t)memory_buffer.data();
                auto addr = offset + base;
                LOG(DEBUG) << std::hex << std::showbase << "Possible debug offsets found at address "
                           << addr << " in a mapping of " << map.Path();
                return addr;
            }
        }
    }
    return 0;
}

remote_addr_t
AbstractProcessManager::scanBSS() const