Trees | Indices | Help |
|
---|
|
XEN ParaVirtualized guest address space.
Nested Classes | |
__metaclass__ Automatic Plugin Registration through metaclasses. (Inherited from rekall.addrspace.BaseAddressSpace) |
|
top_level_class This is the base class of all Address Spaces. (Inherited from rekall.addrspace.BaseAddressSpace) |
Instance Methods | |||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
Inherited from |
Class Methods | |||
|
|||
|
|||
|
Class Variables | |
PAGE_SIZE = 4096
|
|
P2M_MID_PER_PAGE = 512
|
|
P2M_TOP_PER_PAGE = 512
|
|
P2M_PER_PAGE = 512
|
|
XENFEAT_writable_page_tables = 0
|
|
XENFEAT_writable_descriptor_tables = 1
|
|
XENFEAT_auto_translated_physmap = 2
|
|
XENFEAT_supervisor_mode_kernel = 3
|
|
XENFEAT_pae_pgdir_above_4gb = 4
|
|
XENFEAT_mmu_pt_update_preserve_ad = 5
|
|
XENFEAT_hvm_callback_vector = 8
|
|
XENFEAT_hvm_safe_pvclock = 9
|
|
XENFEAT_hvm_pirqs = 10
|
|
XENFEAT_dom0 = 11
|
|
PAGE_MASK = -4096
(Inherited from rekall.addrspace.PagedReader)
|
|
classes =
(Inherited from rekall.addrspace.BaseAddressSpace)
|
|
classes_by_name =
(Inherited from rekall.addrspace.BaseAddressSpace)
|
|
name =
(Inherited from rekall.addrspace.BaseAddressSpace)
|
|
order = 60
(Inherited from rekall.plugins.addrspaces.amd64.AMD64PagedMemory)
|
|
plugin_feature =
(Inherited from rekall.addrspace.BaseAddressSpace)
|
|
valid_mask = 1
(Inherited from rekall.plugins.addrspaces.intel.IA32PagedMemory)
|
|
virtualized = False
(Inherited from rekall.addrspace.BaseAddressSpace)
|
|
volatile = False
(Inherited from rekall.addrspace.BaseAddressSpace)
|
Properties | |
Inherited from |
Method Details |
Instantiate an Intel 32 bit Address space over the layered AS. Args: dtb: The dtb address.
|
Returns the identity frame of pfn. From http://lxr.free-electrons.com/source/arch/x86/include/asm/xen/page.h?v=3.8#L36 |
Translates from a machine address to a physical address. This translates host physical addresses to guest physical. Requires a machine to physical mapping to have been calculated. |
Returns an unsigned 64-bit integer from the address addr in physical memory. If unable to read from that location, returns None.
|
Translates virtual addresses into physical offsets. The function should return either None (no valid mapping) or the offset in physical memory where the address maps. This function is simply a wrapper around describe_vtop() which does all the hard work. You probably never need to override it.
|
|
|
Trees | Indices | Help |
|
---|
Generated by Epydoc 3.0.1 on Mon Oct 9 03:27:58 2017 | http://epydoc.sourceforge.net |