Struct owlyshield_ransom::driver_com::shared_def::CDriverMsg

#[repr(C)]
pub struct CDriverMsg {
    pub extension: [wchar_t; 12],
    pub file_id: FILE_ID_INFO,
    pub mem_sized_used: c_ulonglong,
    pub entropy: f64,
    pub pid: c_ulong,
    pub irp_op: c_uchar,
    pub is_entropy_calc: u8,
    pub file_change: c_uchar,
    pub file_location_info: c_uchar,
    pub filepath: UnicodeString,
    pub gid: c_ulonglong,
    pub next: *const CDriverMsg,
}

The C object returned by the minifilter, available through ReplyIrp. It is low level and use C pointers logic which is not always compatible with RUST (in particular the lifetime of *next). That’s why we convert it asap to a plain Rust IOMessage object. next is null (0x0) when there is no IOMessage remaining

Fields

extension: [wchar_t; 12]

file_id: FILE_ID_INFO

mem_sized_used: c_ulonglong

entropy: f64

pid: c_ulong

irp_op: c_uchar

is_entropy_calc: u8

file_change: c_uchar

file_location_info: c_uchar

filepath: UnicodeString

gid: c_ulonglong

next: *const CDriverMsg

null (0x0) when there is no IOMessage remaining

Trait Implementations

impl Clone for CDriverMsg

fn clone(&self) -> CDriverMsg

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CDriverMsg

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Copy for CDriverMsg