Allocations.h File Reference

Headers for management of global variables. More...

Go to the source code of this file.

Functions
BOOLEAN	GlobalDebuggingStateAllocateZeroedMemory (VOID)
	Allocate debugging state memory.
BOOLEAN	GlobalEventsAllocateZeroedMemory (VOID)
	Allocate event store memory.
VOID	GlobalEventsFreeMemory (VOID)
	Free event store memory.
VOID	GlobalDebuggingStateFreeMemory (VOID)
	Free debugging state memory.

Detailed Description

Headers for management of global variables.

Author

Sina Karvandi (sina@.nosp@m.hype.nosp@m.rdbg..nosp@m.org)

Version

0.2

Date

2023-01-17

Copyright

This project is released under the GNU Public License v3.

Function Documentation

GlobalDebuggingStateAllocateZeroedMemory()

BOOLEAN GlobalDebuggingStateAllocateZeroedMemory

(

VOID

)

Allocate debugging state memory.

Returns

BOOLEAN

{
    SSIZE_T BufferSizeInByte = sizeof(PROCESSOR_DEBUGGING_STATE) * KeQueryActiveProcessorCount(0);
 
    //
    // Allocate global variable to hold Debugging(s) state
    //
    g_DbgState = PlatformMemAllocateZeroedNonPagedPool(BufferSizeInByte);
 
    if (!g_DbgState)
    {
        //
        // we use DbgPrint as the vmx-root or non-root is not initialized
        //
 
        LogInfo("err, insufficient memory for allocating debugging state\n");
        return FALSE;
    }
 
    return TRUE;
}

GlobalDebuggingStateFreeMemory()

VOID GlobalDebuggingStateFreeMemory

(

VOID

)

Free debugging state memory.

Returns

VOID

{
    PlatformMemFreePool(g_DbgState);
    g_DbgState = NULL;
}

GlobalEventsAllocateZeroedMemory()

BOOLEAN GlobalEventsAllocateZeroedMemory

(

VOID

)

Allocate event store memory.

Returns

BOOLEAN

{
    //
    // Allocate buffer for saving events
    //
    if (!g_Events)
    {
        g_Events = PlatformMemAllocateNonPagedPool(sizeof(DEBUGGER_CORE_EVENTS));
    }
 
    if (g_Events)
    {
        //
        // Zero the buffer
        //
        RtlZeroBytes(g_Events, sizeof(DEBUGGER_CORE_EVENTS));
    }
 
    return g_Events != NULL;
}

GlobalEventsFreeMemory()

VOID GlobalEventsFreeMemory

(

VOID

)

Free event store memory.

Returns

VOID

{
    if (g_Events != NULL)
    {
        PlatformMemFreePool(g_Events);
        g_Events = NULL;
    }
}