libintrovirt v0.57.4
IntroVirt introspection library
Loading...
Searching...
No Matches
introvirt::windows::WindowsSystemCallEvent Class Referenceabstract

#include <WindowsSystemCallEvent.hh>

Inheritance diagram for introvirt::windows::WindowsSystemCallEvent:
Collaboration diagram for introvirt::windows::WindowsSystemCallEvent:

Public Member Functions

virtual WindowsSystemCallhandler ()=0
 Gets the associated system call handler with this event.
 
virtual const WindowsSystemCallhandler () const =0
 Gets the associated system call handler with this event.
 
virtual SystemCallIndex index () const =0
 
- Public Member Functions inherited from introvirt::SystemCallEvent
virtual FastCallType instruction () const =0
 Get the type of fast system call instruction.
 
virtual std::string name () const =0
 Get a string represenatation of the system call name.
 
virtual uint64_t raw_index () const =0
 Get the system call number executed.
 
virtual void hook_return (bool enabled)=0
 Instruct that the system call's return should be hooked.
 
virtual bool hook_return () const =0
 Check if the return is set to be hooked.
 
virtual uint64_t return_address () const =0
 Get the address where the system call will return.
 
virtual SystemCallEventImpl & impl ()=0
 Used internally.
 
virtual ~SystemCallEvent ()=default
 Destroy the instance.
 

Additional Inherited Members

- Protected Member Functions inherited from introvirt::SystemCallEvent
 SystemCallEvent ()=default
 

Member Function Documentation

◆ handler() [1/2]

virtual const WindowsSystemCall * introvirt::windows::WindowsSystemCallEvent::handler ( ) const
pure virtual

Gets the associated system call handler with this event.

This is set by the OS library (i.e., libwintrovirt). It can return nullptr if the underlying system call is not supported.

Returns
The system call handler, or nullptr if the call is unsupported.

Implements introvirt::SystemCallEvent.

◆ handler() [2/2]

virtual WindowsSystemCall * introvirt::windows::WindowsSystemCallEvent::handler ( )
pure virtual

Gets the associated system call handler with this event.

This is set by the OS library (i.e., libwintrovirt). It can return nullptr if the underlying system call is not supported.

Returns
The system call handler, or nullptr if the call is unsupported.

Implements introvirt::SystemCallEvent.

Examples
ivexec.cc.

◆ index()

virtual SystemCallIndex introvirt::windows::WindowsSystemCallEvent::index ( ) const
pure virtual
Examples
ivexec.cc.

The documentation for this class was generated from the following file: