io_rzk.c File Reference

#include <rz_io.h>
#include <rz_lib.h>
#include <rz_types.h>
#include <rz_util.h>
#include <sys/types.h>

Go to the source code of this file.

Functions
int	rzk__write (RzIO *io, RzIODesc *fd, const ut8 *buf, int count)
static int	rzk__read (RzIO *io, RzIODesc *fd, ut8 *buf, int count)
static int	rzk__close (RzIODesc *fd)
static ut64	rzk__lseek (RzIO *io, RzIODesc *fd, ut64 offset, int whence)
static bool	rzk__plugin_open (RzIO *io, const char *pathname, bool many)
static char *	rzk__system (RzIO *io, RzIODesc *fd, const char *cmd)
static RzIODesc *	rzk__open (RzIO *io, const char *pathname, int rw, int mode)

Variables
RzIOPlugin	rz_io_plugin_rzk
RZ_API RzLibStruct	rizin_plugin

Function Documentation

rzk__close()

static int rzk__close ( RzIODesc *  fd )

static

Definition at line 63 of file io_rzk.c.

                                    {
#if __WINDOWS__
    if (gHandleDriver) {
        CloseHandle(gHandleDriver);
        StartStopService(TEXT("rzk"), TRUE);
    }
#elif defined(__linux__) && !defined(__GNU__)
    if (fd) {
        close((int)(size_t)fd->data);
    }
#else
    eprintf("TODO: rzk not implemented for this plataform.\n");
#endif
    return 0;
}

References close, eprintf, fd, gHandleDriver, StartStopService(), and TRUE.

rzk__lseek()

static ut64 rzk__lseek ( RzIO *  io, RzIODesc *  fd, ut64  offset, int  whence  )

static

Definition at line 79 of file io_rzk.c.

                                                                        {
    return (!whence) ? offset : whence == 1 ? io->off + offset
                        : UT64_MAX;
}

References rz_io_t::off, and UT64_MAX.

rzk__open()

static RzIODesc* rzk__open ( RzIO *  io, const char *  pathname, int  rw, int  mode  )

static

Definition at line 107 of file io_rzk.c.

                                                                             {
    if (!strncmp(pathname, "rzk://", 6)) {
        rw |= RZ_PERM_WX;
#if __WINDOWS__
        RzIOW32 *w32 = RZ_NEW0(RzIOW32);
        if (Init(&pathname[6]) == FALSE) {
            eprintf("rzk__open: Error cant init driver: %s\n", &pathname[6]);
            free(w32);
            return NULL;
        }
        // return rz_io_desc_new (&rz_io_plugin_rzk, -1, pathname, rw, mode, w32);
        return rz_io_desc_new(io, &rz_io_plugin_rzk, pathname, rw, mode, w32);
#elif defined(__linux__) && !defined(__GNU__)
        int fd = open("/dev/rzk", O_RDONLY);
        if (fd == -1) {
            io->cb_printf("rzk__open: Error in opening /dev/rzk.");
            return NULL;
        }
 
        rzk_struct.beid = 0;
        rzk_struct.pid = 0;
        rzk_struct.wp = 1;
        return rz_io_desc_new(io, &rz_io_plugin_rzk, pathname, rw, mode, (void *)(size_t)fd);
#else
        io->cb_printf("Not supported on this platform\n");
#endif
    }
    return NULL;
}

References io_rzk_linux::beid, rz_io_t::cb_printf, eprintf, FALSE, fd, free(), Init(), NULL, O_RDONLY, pathname, io_rzk_linux::pid, rz_io_desc_new(), rz_io_plugin_rzk, RZ_NEW0, RZ_PERM_WX, rzk_struct, and io_rzk_linux::wp.

rzk__plugin_open()

static bool rzk__plugin_open ( RzIO *  io, const char *  pathname, bool  many  )

static

Definition at line 84 of file io_rzk.c.

                                                                        {
    return (!strncmp(pathname, "rzk://", 6));
}

References pathname.

rzk__read()

static int rzk__read ( RzIO *  io, RzIODesc *  fd, ut8 *  buf, int  count  )

static

Definition at line 40 of file io_rzk.c.

                                                                  {
#if __WINDOWS__
    return ReadKernelMemory(io->off, buf, count);
#elif defined(__linux__) && !defined(__GNU__)
    switch (rzk_struct.beid) {
    case 0:
        return ReadMemory(io, fd, IOCTL_READ_KERNEL_MEMORY, rzk_struct.pid, io->off, buf, count);
    case 1:
        return ReadMemory(io, fd, IOCTL_READ_PROCESS_ADDR, rzk_struct.pid, io->off, buf, count);
    case 2:
        return ReadMemory(io, fd, IOCTL_READ_PHYSICAL_ADDR, rzk_struct.pid, io->off, buf, count);
    default:
        io->cb_printf("ERROR: Undefined beid in rzk__read.\n");
        memset(buf, 0xff, count);
        return count;
    }
#else
    io->cb_printf("TODO: rzk not implemented for this plataform.\n");
    memset(buf, 0xff, count);
    return count;
#endif
}

References io_rzk_linux::beid, rz_io_t::cb_printf, count, fd, IOCTL_READ_KERNEL_MEMORY, IOCTL_READ_PHYSICAL_ADDR, IOCTL_READ_PROCESS_ADDR, memset(), rz_io_t::off, io_rzk_linux::pid, ReadKernelMemory(), ReadMemory(), and rzk_struct.

rzk__system()

static char* rzk__system ( RzIO *  io, RzIODesc *  fd, const char *  cmd  )

static

Definition at line 88 of file io_rzk.c.

                                                                  {
    if (!strcmp(cmd, "")) {
        return NULL;
    }
    if (!strncmp(cmd, "mod", 3)) {
#if __WINDOWS__
        GetSystemModules(io);
#endif
    } else {
#if defined(__linux__) && !defined(__GNU__)
        (void)run_ioctl_command(io, fd, cmd);
        return NULL;
#else
        eprintf("Try: 'R!mod'\n    '.R!mod'\n");
#endif
    }
    return NULL;
}

References cmd, eprintf, fd, GetSystemModules(), NULL, and run_ioctl_command().

rzk__write()

int rzk__write	(	RzIO *	io,
		RzIODesc *	fd,
		const ut8 *	buf,
		int	count
	)

Definition at line 18 of file io_rzk.c.

                                                                  {
#if __WINDOWS__
    // eprintf("writing to: 0x%"PFMT64x" len: %x\n",io->off, count);
    return WriteKernelMemory(io->off, buf, count);
#elif defined(__linux__) && !defined(__GNU__)
    switch (rzk_struct.beid) {
    case 0:
        return WriteMemory(io, fd, IOCTL_WRITE_KERNEL_MEMORY, rzk_struct.pid, io->off, buf, count);
    case 1:
        return WriteMemory(io, fd, IOCTL_WRITE_PROCESS_ADDR, rzk_struct.pid, io->off, buf, count);
    case 2:
        return WriteMemory(io, fd, IOCTL_WRITE_PHYSICAL_ADDR, rzk_struct.pid, io->off, buf, count);
    default:
        io->cb_printf("ERROR: Undefined beid in rzk__write.\n");
        return -1;
    }
#else
    io->cb_printf("TODO: rzk not implemented for this plataform.\n");
    return -1;
#endif
}

References io_rzk_linux::beid, rz_io_t::cb_printf, count, fd, IOCTL_WRITE_KERNEL_MEMORY, IOCTL_WRITE_PHYSICAL_ADDR, IOCTL_WRITE_PROCESS_ADDR, rz_io_t::off, io_rzk_linux::pid, rzk_struct, WriteKernelMemory(), and WriteMemory().

Variable Documentation

rizin_plugin

RZ_API RzLibStruct rizin_plugin

Initial value:

= {
    .type = RZ_LIB_TYPE_IO,
    .data = &rz_io_plugin_rzk,
    .version = RZ_VERSION
}

Definition at line 152 of file io_rzk.c.

rz_io_plugin_rzk

RzIOPlugin rz_io_plugin_rzk

Initial value:

= {
    .name = "rzk",
    .desc = "Kernel access API io",
    .uris = "rzk://",
    .license = "LGPL3",
    .open = rzk__open,
    .close = rzk__close,
    .read = rzk__read,
    .check = rzk__plugin_open,
    .lseek = rzk__lseek,
    .system = rzk__system,
    .write = rzk__write,
}

Definition at line 137 of file io_rzk.c.

Referenced by rzk__open().