Struct owlyshield_ransom::driver_com::shared_def::ReplyIrp

#[repr(C)]
pub struct ReplyIrp {
    pub data_size: c_ulonglong,
    pub data: *const CDriverMsg,
    pub num_ops: u64,
}

Low-level C-like object to communicate with the minifilter. The minifilter yields ReplyIrp objects (retrieved by crate::driver_com::Driver::get_irp to manage the fixed size of the *data buffer. In other words, a ReplyIrp is a collection of CDriverMsg with a capped size.

Fields

data_size: c_ulonglong

The size od the collection.

data: *const CDriverMsg

The C pointer to the buffer containinf the CDriverMsg events.

num_ops: u64

The number of different operations in this collection.

Implementations

impl ReplyIrp

fn unpack_drivermsg(&self) -> Vec<&CDriverMsg>

Iterate through self.data and returns the collection of CDriverMsg

Trait Implementations

impl Clone for ReplyIrp

fn clone(&self) -> ReplyIrp

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ReplyIrp

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Copy for ReplyIrp