introvirt::windows::nt::NtQuerySymbolicLinkObject Class Reference

Handler class for the NtQuerySymbolicLinkObject system call. More...

#include <NtQuerySymbolicLinkObject.hh>

Inheritance diagram for introvirt::windows::nt::NtQuerySymbolicLinkObject:

Collaboration diagram for introvirt::windows::nt::NtQuerySymbolicLinkObject:

Public Member Functions
virtual uint64_t	LinkHandle () const =0
	Getter for LinkHandle.
virtual guest_ptr< void >	LinkTargetPtr () const =0
	Getter for LinkTargetPtr.
virtual guest_ptr< void >	ReturnedLengthPtr () const =0
	Getter for ReturnedLengthPtr.
virtual void	LinkHandle (uint64_t LinkHandle)=0
	Setter for LinkHandle.
virtual void	LinkTargetPtr (const guest_ptr< void > &pLinkTarget)=0
	Setter for LinkTargetPtr.
virtual void	ReturnedLengthPtr (const guest_ptr< void > &pReturnedLength)=0
	Setter for ReturnedLengthPtr.
virtual const UNICODE_STRING *	LinkTarget () const =0
virtual UNICODE_STRING *	LinkTarget ()=0
virtual uint32_t	ReturnedLength () const =0
virtual void	ReturnedLength (uint32_t ReturnedLength)=0
Public Member Functions inherited from introvirt::windows::nt::NtSystemCall
virtual NTSTATUS	result () const =0
	Get the result code.
virtual void	result (NTSTATUS_CODE code)=0
	Set the result code.
Public Member Functions inherited from introvirt::windows::WindowsSystemCall
virtual SystemCallIndex	index () const =0
	Get the system call number.
Public Member Functions inherited from introvirt::SystemCall
virtual const std::string &	name () const =0
	Get the name of the system call.
virtual void	write (std::ostream &os=std::cout) const =0
	Write a human-readable description of this system call.
virtual Json::Value	json () const =0
virtual bool	will_return () const =0
virtual void	data (const std::string &key, const std::shared_ptr< void > &value)=0
	Store arbitrary data with the SystemCall.
virtual void	data (const std::string &key, std::shared_ptr< void > &&value)=0
	Store arbitrary data with the SystemCall.
virtual std::shared_ptr< void >	data (const std::string &key)=0
	Retrieve arbitrary data stored with the SystemCall.
virtual std::shared_ptr< const void >	data (const std::string &key) const =0
	Retrieve arbitrary data stored with the SystemCall.
virtual bool	supported () const =0
	Check if this system call is supported by a more specific handler.
virtual void	handle_return_event (Event &event)=0
	Handle a system call return event.
virtual	~SystemCall ()=default
	Destroy the instance.

Static Public Member Functions
static NTSTATUS	inject (uint64_t LinkHandle, UNICODE_STRING &LinkTarget, uint32_t *ReturnedLength)

Detailed Description

Handler class for the NtQuerySymbolicLinkObject system call.

Member Function Documentation

inject()

static NTSTATUS introvirt::windows::nt::NtQuerySymbolicLinkObject::inject ( uint64_t  LinkHandle, UNICODE_STRING &  LinkTarget, uint32_t *  ReturnedLength  )

static

LinkHandle() [1/2]

virtual uint64_t introvirt::windows::nt::NtQuerySymbolicLinkObject::LinkHandle ( ) const

pure virtual

Getter for LinkHandle.

Returns

The value of the LinkHandle parameter

LinkHandle() [2/2]

virtual void introvirt::windows::nt::NtQuerySymbolicLinkObject::LinkHandle ( uint64_t  LinkHandle )

pure virtual

Setter for LinkHandle.

Parameters

LinkHandle

The value to set for the LinkHandle parameter

LinkTarget() [1/2]

virtual const UNICODE_STRING * introvirt::windows::nt::NtQuerySymbolicLinkObject::LinkTarget ( ) const

pure virtual

LinkTarget() [2/2]

virtual UNICODE_STRING * introvirt::windows::nt::NtQuerySymbolicLinkObject::LinkTarget ( )

pure virtual

LinkTargetPtr() [1/2]

virtual guest_ptr< void > introvirt::windows::nt::NtQuerySymbolicLinkObject::LinkTargetPtr ( ) const

pure virtual

Getter for LinkTargetPtr.

Returns

The address pointed to by the the LinkTargetPtr parameter

LinkTargetPtr() [2/2]

virtual void introvirt::windows::nt::NtQuerySymbolicLinkObject::LinkTargetPtr ( const guest_ptr< void > &  pLinkTarget )

pure virtual

Setter for LinkTargetPtr.

Parameters

pLinkTarget

The address to set for the LinkTargetPtr parameter

ReturnedLength() [1/2]

virtual uint32_t introvirt::windows::nt::NtQuerySymbolicLinkObject::ReturnedLength ( ) const

pure virtual

ReturnedLength() [2/2]

virtual void introvirt::windows::nt::NtQuerySymbolicLinkObject::ReturnedLength ( uint32_t  ReturnedLength )

pure virtual

ReturnedLengthPtr() [1/2]

virtual guest_ptr< void > introvirt::windows::nt::NtQuerySymbolicLinkObject::ReturnedLengthPtr ( ) const

pure virtual

Getter for ReturnedLengthPtr.

Returns

The address pointed to by the the ReturnedLengthPtr parameter

ReturnedLengthPtr() [2/2]

virtual void introvirt::windows::nt::NtQuerySymbolicLinkObject::ReturnedLengthPtr ( const guest_ptr< void > &  pReturnedLength )

pure virtual

Setter for ReturnedLengthPtr.

Parameters

pReturnedLength

The address to set for the ReturnedLengthPtr parameter

---

The documentation for this class was generated from the following file:

• /home/runner/work/IntroVirt/IntroVirt/include/introvirt/windows/kernel/nt/syscall/NtQuerySymbolicLinkObject.hh