Trees | Indices | Help |
|
---|
|
A class for dealing with encoded text strings.
Text strings are always encoded in some way in memory. The specific way of encoding them is called the "encoding" - for example usually (but not always) in windows the encoding is called "utf16", while on linux its usually "utf8".
By default we take the encoding from the profile constant "default_text_encoding".
Nested Classes | |
__metaclass__ Give each object a unique ID. (Inherited from rekall.obj.BaseObject) |
Instance Methods | |||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
|
|||
Inherited from |
Class Methods | |||
|
Class Variables | |
obj_name = <No name>
(Inherited from rekall.obj.BaseObject)
|
|
obj_parent = <No parent>
(Inherited from rekall.obj.BaseObject)
|
|
obj_producers = None hash(x) (Inherited from rekall.obj.BaseObject) |
Properties | |
obj_size This is equivalent to strlen() plus the terminator. |
|
indices Returns (usually 1) representation(s) of self usable as dict keys. (Inherited from rekall.plugins.overlays.basic.String) |
|
obj_end (Inherited from rekall.plugins.overlays.basic.String) | |
parents Returns all the parents of this object. (Inherited from rekall.obj.BaseObject) |
|
Inherited from |
Method Details |
Constructor. Args: length: The maximum length of the string. terminator: The terminator for this string. If None, there will be no checking for null terminations (Pure character array).
|
Do the actual reading and decoding of this member When vm is specified, we are asked to evaluate this object is another address space than the one it was created on. Derived classes should allow for this.
|
Return an object to be proxied
|
|
|
|
repr(x)
|
Writes the data back into the address space
|
Property Details |
obj_sizeThis is equivalent to strlen() plus the terminator.
|
Trees | Indices | Help |
|
---|
Generated by Epydoc 3.0.1 on Mon Oct 9 03:28:30 2017 | http://epydoc.sourceforge.net |