MCPcopy Create free account
hub / github.com/qilingframework/qiling / read_mapping

Method read_mapping

qiling/os/macos/kernel_func.py:40–50  ·  view source on GitHub ↗
(self, addr)

Source from the content-addressed store, hash-verified

38 self.ql = ql
39
40 def read_mapping(self, addr):
41 content = self.ql.mem.read(addr, self.size)
42 self.sfm_address = unpack("<Q", self.ql.mem.read(addr, 8))[0]
43 self.sfm_size = unpack("<Q", self.ql.mem.read(addr + 8, 8))[0]
44 self.sfm_file_offset = unpack("<Q", self.ql.mem.read(addr + 16, 8))[0]
45 self.sfm_max_prot = unpack("<L", self.ql.mem.read(addr + 24, 4))[0]
46 self.sfm_init_prot = unpack("<L", self.ql.mem.read(addr + 28, 4))[0]
47
48 self.ql.log.debug("[ShareFileMapping]: addr: 0x{:X}, size: 0x{:X}, fileOffset:0x{:X}, maxProt: {}, initProt: {}".format(
49 self.sfm_address, self.sfm_size, self.sfm_file_offset, self.sfm_max_prot, self.sfm_init_prot
50 ))
51
52
53# reference to bsd/sys/proc_info.h

Calls 2

formatMethod · 0.80
readMethod · 0.45

Tested by

no test coverage detected