CorePrPsInfo.hpp

Go to the documentation of this file.

/* Copyright 2017 - 2025 R. Thomas
 * Copyright 2017 - 2025 Quarkslab
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
#ifndef LIEF_ELF_CORE_PRPSINFO_H
#define LIEF_ELF_CORE_PRPSINFO_H
 
#include <ostream>
 
#include "LIEF/visibility.h"
#include "LIEF/ELF/enums.hpp"
#include "LIEF/ELF/Note.hpp"
 
namespace LIEF {
namespace ELF {

class LIEF_API CorePrPsInfo : public Note {
  public:
  struct info_t {
    uint8_t state = 0;    
    char sname = ' ';     
    bool zombie = false;  
    uint8_t nice = 0;     
    uint64_t flag = 0;    
    uint32_t uid = 0;     
    uint32_t gid = 0;     
    uint32_t pid = 0;     
    uint32_t ppid = 0;    
    uint32_t pgrp = 0;    
    uint32_t sid = 0;     
    std::string filename; 
    std::string args;     

    std::string filename_stripped() const {
      return filename.c_str();
    }

    std::string args_stripped() const {
      return args.c_str();
    }
  };
  CorePrPsInfo(ARCH arch, Header::CLASS cls, std::string name,
               uint32_t type, description_t description) :
    Note(std::move(name), TYPE::CORE_PRPSINFO, type, std::move(description), ""),
    arch_(arch), class_(cls)
  {}
 
  std::unique_ptr<Note> clone() const override {
    return std::unique_ptr<Note>(new CorePrPsInfo(*this));
  }

  result<info_t> info() const;
  void info(const info_t& info);
 
  void dump(std::ostream& os) const override;
 
  void accept(Visitor& visitor) const override;
 
  static bool classof(const Note* note) {
    return note->type() == Note::TYPE::CORE_PRPSINFO;
  }
 
  ~CorePrPsInfo() override = default;
 
  LIEF_API friend
  std::ostream& operator<<(std::ostream& os, const CorePrPsInfo& note) {
    note.dump(os);
    return os;
  }
  private:
  [[maybe_unused]] ARCH arch_ = ARCH::NONE;
  Header::CLASS class_ = Header::CLASS::NONE;
};
 
} // namepsace ELF
} // namespace LIEF
 
#endif