Struct MappedMemory 

pub struct MappedMemory {
    pub data: Vec<u8>,
    pub base_address: u64,
}

Represents a mapped region of process memory for pointer reads. Used by _readAddressFromMemory:atAddress: to read pointer-sized values from a pre-mapped buffer without additional Mach VM calls.

Fields

data: Vec<u8>

Raw bytes of the mapped memory region.

base_address: u64

Virtual address corresponding to data[0].

Implementations

impl MappedMemory

pub fn read_bytes(&self, address: u64, len: usize) -> Option<&[u8]>

Reads a slice of bytes from this mapped region at the given virtual address. Returns None if the range is out of bounds.

pub fn contains_address(&self, address: u64) -> bool

Returns true if this region contains the given address.

impl MappedMemory

pub fn read_pointer(&self, address: u64, is_64_bit: bool) -> Option<u64>

Reads a pointer-sized value from the mapped memory at the given virtual address. Reads 8 bytes for 64-bit processes, 4 bytes for 32-bit.

Examples

use crashrustler::MappedMemory;

let mem = MappedMemory {
    data: vec![0x78, 0x56, 0x34, 0x12, 0xEF, 0xBE, 0xAD, 0xDE],
    base_address: 0x1000,
};

// 64-bit read: all 8 bytes as little-endian u64
assert_eq!(mem.read_pointer(0x1000, true), Some(0xDEADBEEF_12345678));

// 32-bit read: first 4 bytes as little-endian u32
assert_eq!(mem.read_pointer(0x1000, false), Some(0x12345678));

// Out of range
assert_eq!(mem.read_pointer(0x2000, true), None);

Trait Implementations

impl Clone for MappedMemory

fn clone(&self) -> MappedMemory

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MappedMemory

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl MemoryReader for MappedMemory

MemoryReader implementation for MappedMemory (for testing).

fn read_memory(&self, address: u64, size: usize) -> Option<Vec<u8>>

Reads size bytes from the given virtual address. Returns None if the read fails.

fn read_u8(&self, address: u64) -> Option<u8>

Reads a single byte.

fn read_u16(&self, address: u64) -> Option<u16>

Reads a little-endian u16.

fn read_u32(&self, address: u64) -> Option<u32>

Reads a little-endian u32.

fn read_u64(&self, address: u64) -> Option<u64>

Reads a little-endian u64.

fn read_i32(&self, address: u64) -> Option<i32>

Reads a little-endian i32.

fn read_i64(&self, address: u64) -> Option<i64>

Reads a little-endian i64.

fn read_pointer(&self, address: u64, is_64_bit: bool) -> Option<u64>

Reads a pointer-sized value (4 or 8 bytes depending on is_64_bit).