Allocations.c File Reference

Management of global variables memory relating to debugger. More...

#include "pch.h"

Functions
BOOLEAN	GlobalDebuggingStateAllocateZeroedMemory (VOID)
	Allocate debugging state memory.
VOID	GlobalDebuggingStateFreeMemory (VOID)
	Free debugging state memory.
BOOLEAN	GlobalEventsAllocateZeroedMemory (VOID)
	Allocate event store memory.
VOID	GlobalEventsFreeMemory (VOID)
	Free event store memory.

Detailed Description

Management of global variables memory relating to debugger.

Author

Behrooz Abbassi (Behro.nosp@m.ozAb.nosp@m.bassi.nosp@m.@hyp.nosp@m.erdbg.nosp@m..org)

Sina Karvandi (sina@.nosp@m.hype.nosp@m.rdbg..nosp@m.org)

Version

0.2

Date

2023-01-17

Copyright

This project is released under the GNU Public License v3.

Function Documentation

GlobalDebuggingStateAllocateZeroedMemory()

BOOLEAN GlobalDebuggingStateAllocateZeroedMemory

(

VOID

)

Allocate debugging state memory.

Returns

BOOLEAN

{
    SSIZE_T BufferSizeInByte = sizeof(PROCESSOR_DEBUGGING_STATE) * KeQueryActiveProcessorCount(0);
 
    //
    // Allocate global variable to hold Debugging(s) state
    //
    g_DbgState = PlatformMemAllocateZeroedNonPagedPool(BufferSizeInByte);
 
    if (!g_DbgState)
    {
        //
        // we use DbgPrint as the vmx-root or non-root is not initialized
        //
 
        LogInfo("err, insufficient memory for allocating debugging state\n");
        return FALSE;
    }
 
    return TRUE;
}

GlobalDebuggingStateFreeMemory()

VOID GlobalDebuggingStateFreeMemory

(

VOID

)

Free debugging state memory.

Returns

VOID

{
    PlatformMemFreePool(g_DbgState);
    g_DbgState = NULL;
}

GlobalEventsAllocateZeroedMemory()

BOOLEAN GlobalEventsAllocateZeroedMemory

(

VOID

)

Allocate event store memory.

Returns

BOOLEAN

{
    //
    // Allocate buffer for saving events
    //
    if (!g_Events)
    {
        g_Events = PlatformMemAllocateNonPagedPool(sizeof(DEBUGGER_CORE_EVENTS));
    }
 
    if (g_Events)
    {
        //
        // Zero the buffer
        //
        RtlZeroBytes(g_Events, sizeof(DEBUGGER_CORE_EVENTS));
    }
 
    return g_Events != NULL;
}

GlobalEventsFreeMemory()

VOID GlobalEventsFreeMemory

(

VOID

)

Free event store memory.

Returns

VOID

{
    if (g_Events != NULL)
    {
        PlatformMemFreePool(g_Events);
        g_Events = NULL;
    }
}