Management of global variables memory relating to debugger. More...

#include "pch.h"

Functions
BOOLEAN	GlobalDebuggingStateAllocateZeroedMemory (VOID)
	Allocate debugging state memory.
VOID	GlobalDebuggingStateFreeMemory (VOID)
	Free debugging state memory.
BOOLEAN	GlobalEventsAllocateZeroedMemory (VOID)
	Allocate event store memory.
VOID	GlobalEventsFreeMemory (VOID)
	Free event store memory.

Detailed Description

Management of global variables memory relating to debugger.

Author: Behrooz Abbassi (Behro.nosp@m.ozAb.nosp@m.bassi.nosp@m.@hyp.nosp@m.erdbg.nosp@m..org); Sina Karvandi (sina@.nosp@m.hype.nosp@m.rdbg..nosp@m.org)

Version: 0.2

Date: 2023-01-17

Copyright: This project is released under the GNU Public License v3.

Function Documentation

◆ GlobalDebuggingStateAllocateZeroedMemory()

BOOLEAN GlobalDebuggingStateAllocateZeroedMemory ( VOID )

Allocate debugging state memory.

Returns: BOOLEAN

{
    SSIZE_T BufferSizeInByte = sizeof(PROCESSOR_DEBUGGING_STATE) * KeQueryActiveProcessorCount(0);
 
    //
    // Allocate global variable to hold Debugging(s) state
    //
    g_DbgState = PlatformMemAllocateZeroedNonPagedPool(BufferSizeInByte);
 
    if (!g_DbgState)
    {
        //
        // we use DbgPrint as the vmx-root or non-root is not initialized
        //
 
        LogInfo("err, insufficient memory for allocating debugging state\n");
        return FALSE;
    }
 
    return TRUE;
}

◆ GlobalDebuggingStateFreeMemory()

VOID GlobalDebuggingStateFreeMemory ( VOID )

Free debugging state memory.

Returns: VOID

{
    PlatformMemFreePool(g_DbgState);
    g_DbgState = NULL;
}

◆ GlobalEventsAllocateZeroedMemory()

BOOLEAN GlobalEventsAllocateZeroedMemory ( VOID )

Allocate event store memory.

Returns: BOOLEAN

{
    //
    // Allocate buffer for saving events
    //
    if (!g_Events)
    {
        g_Events = PlatformMemAllocateNonPagedPool(sizeof(DEBUGGER_CORE_EVENTS));
    }
 
    if (g_Events)
    {
        //
        // Zero the buffer
        //
        RtlZeroBytes(g_Events, sizeof(DEBUGGER_CORE_EVENTS));
    }
 
    return g_Events != NULL;
}

◆ GlobalEventsFreeMemory()

VOID GlobalEventsFreeMemory ( VOID )

Free event store memory.

Returns: VOID

{
    if (g_Events != NULL)
    {
        PlatformMemFreePool(g_Events);
        g_Events = NULL;
    }
}