NLIEF | LIEF namespace |
Nassembly | Namespace related to assembly/disassembly support |
Naarch64 | AArch64 architecture-related namespace |
Noperands | Namespace that wraps the different aarch64 operands |
CImmediate | This class represents an immediate operand (i.e. a constant) |
CMemory | This class represents a memory operand |
Cshift_info_t | This structure holds shift info (type + value) |
Coffset_t | Wraps a memory offset as an integer offset or as a register offset |
CPCRelative | This class represents a PC-relative operand |
CRegister | This class represents a register operand |
Creg_t | |
CInstruction | This class represents an AArch64 instruction |
COperand | This class represents an operand for an AArch64 instruction |
CIterator | Forward iterator that outputs aarch64 Operand as std::unique_ptr |
Narm | ARM architecture-related namespace |
CInstruction | This class represents an ARM/Thumb instruction |
Nebpf | EBPF architecture-related namespace |
CInstruction | This class represents an eBPF instruction |
Nmips | Mips architecture-related namespace |
CInstruction | This class represents a Mips instruction (including mips64, mips32) |
Npowerpc | PowerPC architecture-related namespace |
CInstruction | |
Nriscv | RISC-V architecture-related namespace |
CInstruction | This class represents a RISC-V (32 or 64 bit) instruction |
Nx86 | X86/x86-64 architecture-related namespace |
Noperands | Namespace that wraps the different x86/x86-64 operands |
CImmediate | This class represents an immediate operand (i.e. a constant) |
CMemory | This class represents a memory operand |
CPCRelative | This class represents a RIP/EIP-relative operand |
CRegister | This class represents a register operand |
CInstruction | This class represents a x86/x86-64 instruction |
COperand | This class represents an operand for an x86/x86-64 instruction |
CIterator | Forward iterator that outputs x86 Operand as std::unique_ptr |
CAssemblerConfig | This class exposes the different elements that can be configured to assemble code |
CEngine | This class interfaces the assembler/disassembler support |
CInstruction | This class represents an assembly instruction |
CIterator | Lazy-forward iterator that outputs Instruction |
Ndetails | |
Ccanbe_unique | |
NELF | Namespace related to the LIEF's ELF module |
CBinary | Class which represents an ELF binary |
CBuilder | Class which takes an ELF::Binary object and reconstructs a valid binary |
Cconfig_t | Configuration options to tweak the building process |
CDynamicEntry | Class which represents an entry in the dynamic table These entries are located in the .dynamic section or the PT_DYNAMIC segment |
CDynamicEntryArray | Class that represent an Array in the dynamic table. This entry is associated with constructors: |
CDynamicEntryFlags | |
CDynamicEntryLibrary | Class which represents a DT_NEEDED entry in the dynamic table |
CDynamicEntryRpath | Class which represents a DT_RPATH entry. This attribute is deprecated (cf. man ld) in favor of DT_RUNPATH (See DynamicEntryRunPath) |
CDynamicEntryRunPath | Class that represents a DT_RUNPATH which is used by the loader to resolve libraries (DynamicEntryLibrary) |
CDynamicSharedObject | Class which represents a DT_SONAME entry in the dynamic table This kind of entry is usually used to name the original library |
CGnuHash | Class which provides a view over the GNU Hash implementation. Most of the fields are read-only since the values are re-computed by the LIEF::ELF::Builder |
CHash | Class which implements a visitor to compute a deterministic hash for LIEF ELF objects |
CHeader | Class which represents the ELF's header. This class mirrors the raw ELF Elfxx_Ehdr structure |
CNote | Class which represents an ELF note. This class can be instantiated using the static Note::create functions |
CAndroidIdent | Class representing the ".note.android.ident" section |
CCoreAuxv | Class representing core auxv object |
CCoreFile | Class representing a core NT_FILE which describes the mapped files of the process |
Centry_t | Core file entry |
CCorePrPsInfo | Class representing the NT_PRPSINFO core note. This kind of note represents general information about the process |
Cinfo_t | |
CCorePrStatus | Class representing core PrPsInfo object |
Csiginfo_t | |
Ctimeval_t | |
Cpr_status_t | |
CRegisters | |
CCoreSigInfo | Class representing a core siginfo object |
CNoteAbi | Class that wraps the NT_GNU_ABI_TAG note |
CNoteGnuProperty | Class that wraps the NT_GNU_PROPERTY_TYPE_0 note |
CProperty | This class wraps the different properties that can be used in a NT_GNU_PROPERTY_TYPE_0 note |
CAArch64Feature | This class represents the GNU_PROPERTY_AARCH64_FEATURE_1_AND property |
CAArch64PAuth | This class represents the GNU_PROPERTY_AARCH64_FEATURE_PAUTH property |
CGeneric | This class represents a property which doesn't have a concrete LIEF implementation |
CNeeded | |
CNoteNoCopyOnProtected | This class provides an interface over the GNU_PROPERTY_NO_COPY_ON_PROTECTED property. This property indicates that the linker shouldn't copy relocations against protected symbols |
CStackSize | This class provides an interface over the GNU_PROPERTY_STACK_SIZE property |
CX86Features | This class interfaces the different GNU_PROPERTY_X86_FEATURE_* properties which includes: |
CX86ISA | This class interfaces the different GNU_PROPERTY_X86_ISA_* properties which includes: |
CQNXStack | Class representing the QNX QNT_STACK note |
CParser | Class which parses and transforms an ELF file into a ELF::Binary object |
CParserConfig | This structure is used to tweak the ELF Parser (ELF::Parser) |
CRelocation | Class that represents an ELF relocation |
CSection | Class which represents an ELF Section |
CSegment | Class which represents the ELF segments |
CSymbol | Class which represents an ELF symbol |
CSymbolVersion | Class which represents an entry defined in the DT_VERSYM dynamic entry |
CSymbolVersionAux | Class which represents an Auxiliary Symbol version |
CSymbolVersionAuxRequirement | |
CSymbolVersionDefinition | Class which represents an entry defined in DT_VERDEF or .gnu.version_d |
CSymbolVersionRequirement | Class which represents an entry in the DT_VERNEED or .gnu.version_r table |
CSysvHash | Class which represents the SYSV hash for the symbols resolution |
NPE | Namespace related to the LIEF's PE module |
Ndetails | |
Carm64_packed_t | |
Carm64_unpacked_t | |
Carm64_epilog_scope_t | |
Cunwind_code_t | |
Nunwind_aarch64 | This namespace wraps code related to PE-ARM64 unwinding code |
CPackedFunction | This class represents a packed AArch64 exception entry |
CUnpackedFunction | This class represents an unpacked AArch64 exception entry |
Cepilog_scope_t | This structure describes an epilog scope |
Nunwind_x64 | This namespace wraps code related to PE-x64 unwinding code |
CCode | Base class for all unwind operations |
CAlloc | This class represents a stack-allocation operation (UNWIND_OPCODES::ALLOC_SMALL or UNWIND_OPCODES::ALLOC_LARGE) |
CPushNonVol | Push a nonvolatile integer register, decrementing RSP by 8 |
CPushMachFrame | Push a machine frame |
CSetFPReg | Establish the frame pointer register by setting the register to some offset of the current RSP |
CSaveNonVolatile | Save a nonvolatile integer register on the stack using a MOV instead of a PUSH |
CSaveXMM128 | |
CEpilog | Describes the function's epilog |
CSpare | |
CBinary | Class which represents a PE binary This is the main interface to manage and modify a PE executable |
CBuilder | Class that is used to rebuild a raw PE binary from a PE::Binary object |
Cconfig_t | This structure is used to configure the build operation |
CCodeIntegrity | |
CDataDirectory | Class that represents a PE data directory entry |
CCodeView | Interface for the (generic) Debug CodeView (IMAGE_DEBUG_TYPE_CODEVIEW) |
CCodeViewPDB | CodeView PDB specialization |
CDebug | This class represents a generic entry in the debug data directory. For known types, this class is extended to provide a dedicated API (see: CodeCodeView) |
CExDllCharacteristics | This class represents the IMAGE_DEBUG_TYPE_EX_DLLCHARACTERISTICS debug entry |
CFPO | This class represents the IMAGE_DEBUG_TYPE_FPO debug entry |
Centry_t | Represents the stack frame layout for a x86 function when frame pointer omission (FPO) optimization is used |
CPDBChecksum | This class represents the PDB Checksum debug entry which is essentially an array of bytes representing the checksum of the PDB content |
CPogo | This class represents a Profile Guided Optimization entry from the debug directory (IMAGE_DEBUG_TYPE_POGO) |
CPogoEntry | |
CRepro | This class represents a reproducible build entry from the debug directory. (IMAGE_DEBUG_TYPE_REPRO). This entry is usually generated with the undocumented /Brepro linker flag |
CVCFeature | This class represents the IMAGE_DEBUG_TYPE_VC_FEATURE debug entry |
CDelayImport | Class that represents a PE delayed import |
CDelayImportEntry | Class that represents an entry (i.e. an import) in the delay import table (DelayImport) |
CDosHeader | Class which represents the DosHeader, the first structure presents at the beginning of a PE file |
CExceptionInfo | This class is the base class for any exception or runtime function entry |
CRuntimeFunctionAArch64 | This class represents an entry in the exception table (.pdata section) for the AArch64 architecture |
CRuntimeFunctionX64 | This class represents an entry in the exception table (.pdata section) for the x86-64 architecture |
Cunwind_info_t | This structure represents the UNWIND_INFO which records the effects a function has on the stack pointer, and where the nonvolatile registers are saved on the stack |
CExport | Class which represents a PE Export |
CExportEntry | Class which represents a PE Export entry (cf. PE::Export) |
Cforward_information_t | |
CFactory | This factory is used to create PE from scratch |
CHash | Class which implements a visitor to compute a deterministic hash for LIEF PE objects |
CHeader | Class that represents the PE header (which follows the DosHeader) |
CImport | Class that represents a PE import |
CImportEntry | Class that represents an entry (i.e. an import) in the import table (Import) |
CCHPEMetadata | Base class for any Compiled Hybrid Portable Executable (CHPE) metadata |
CCHPEMetadataARM64 | This class represents ARM64-specific metadata used in CHPE (Compatible Hybrid PE) binaries, particularly for hybrid architectures like ARM64EC and ARM64X |
Crange_entry_t | Structure that describes architecture-specific ranges |
Credirection_entry_t | Structure that describes a redirection |
Ccode_range_entry_point_t | Mirror of IMAGE_ARM64EC_CODE_RANGE_ENTRY_POINT: Represents a mapping between code range and its entry point |
CCHPEMetadataX86 | This class represents hybrid metadata for X86 |
CDynamicFixup | This is the base class for any fixups located in DynamicRelocation |
CDynamicFixupARM64Kernel | This class wraps fixups associated with the (special) symbol value: IMAGE_DYNAMIC_RELOCATION_ARM64_KERNEL_IMPORT_CALL_TRANSFER (8) |
Creloc_entry_t | Mirror IMAGE_IMPORT_CONTROL_TRANSFER_ARM64_RELOCATION |
CDynamicFixupARM64X | This class represents IMAGE_DYNAMIC_RELOCATION_ARM64X |
Creloc_entry_t | |
CDynamicFixupControlTransfer | This class wraps fixups associated with the (special) symbol value: IMAGE_DYNAMIC_RELOCATION_GUARD_IMPORT_CONTROL_TRANSFER (3) |
Creloc_entry_t | Mirror IMAGE_IMPORT_CONTROL_TRANSFER_DYNAMIC_RELOCATION |
CDynamicFixupGeneric | This class represents a generic entry where fixups are regular relocations (LIEF::PE::Relocation) |
CDynamicFixupUnknown | This class represents an special dynamic relocation where the format of the fixups is not supported by LIEF |
CDynamicRelocation | This is the base class for any IMAGE_DYNAMIC_RELOCATION32, IMAGE_DYNAMIC_RELOCATION32_V2, IMAGE_DYNAMIC_RELOCATION64, IMAGE_DYNAMIC_RELOCATION64_V2 dynamic relocations |
CDynamicRelocationV1 | This class represents a dynamic relocation (IMAGE_DYNAMIC_RELOCATION32 or IMAGE_DYNAMIC_RELOCATION64) |
CDynamicRelocationV2 | This class represents a dynamic relocation (IMAGE_DYNAMIC_RELOCATION64_V2 or IMAGE_DYNAMIC_RELOCATION32_V2) |
CFunctionOverride | This class represents IMAGE_DYNAMIC_RELOCATION_FUNCTION_OVERRIDE |
Cimage_bdd_dynamic_relocation_t | Mirror IMAGE_BDD_DYNAMIC_RELOCATION |
Cimage_bdd_info_t | Mirror IMAGE_BDD_INFO |
CFunctionOverrideInfo | |
CEnclaveConfiguration | This class represents the enclave configuration |
CEnclaveImport | Defines an entry in the array of images that an enclave can import |
CLoadConfiguration | This class represents the load configuration data associated with the IMAGE_LOAD_CONFIG_DIRECTORY |
Cguard_function_t | |
CVolatileMetadata | This class represents volatile metadata which can be enabled at link time with /volatileMetadata |
Crange_t | |
COptionalHeader | Class which represents the PE OptionalHeader structure |
CParser | Main interface to parse PE binaries. In particular the static functions: Parser::parse should be used to get a LIEF::PE::Binary |
CParserConfig | This structure is used to tweak the PE Parser (PE::Parser) |
CRelocation | Class which represents the Base Relocation Block We usually find this structure in the .reloc section |
CRelocationEntry | Class which represents an entry of the PE relocation table |
CResourceData | Class which represents a Data Node in the PE resources tree |
CResourceDirectory | |
CResourceNode | Class which represents a Node in the resource tree |
CResourceAccelerator | |
CResourceDialog | This class is the base class for either a regular (legacy) Dialog or an extended Dialog. These different kinds of Dialogs are documented by MS at the following addresses: |
Cordinal_or_str_t | This structure wraps either an ordinal value (uint16_t) or a string. The ordinal value should refer to an existing resource id in the resource tree |
CItem | This class represents an element of the dialog. It can be for instance, a button, or a caption |
CResourceDialogExtended | Implementation for the new extended dialogbox format |
CItem | This class represents a DLGTEMPLATEEX item (DLGITEMTEMPLATEEX) |
Cfont_t | Font information for the font to use for the text in the dialog box and its controls |
CResourceDialogRegular | Implementation for a regular/legacy dialog box |
CItem | This class represents a DLGTEMPLATE item: DLGITEMTEMPLATE |
Cfont_t | This structure represents additional font information that might be embedded at the end of the DLGTEMPLATE stream |
CResourceIcon | |
CResourceStringFileInfo | Representation of the StringFileInfo structure |
CResourceStringTable | This class represents the StringTable structure. This structure can be seen as a dictionary of key, values with key and values defined a utf-16 string |
Centry_t | An entry in this table which is composed of an UTF-16 key and an UTF-16 value |
CResourceVar | This class represents an element of the ResourceVarFileInfo structure It typically contains a list of language and code page identifier pairs that the version of the application or DLL supports |
CResourceVarFileInfo | Representation of the VarFileInfo structure |
CResourceVersion | Representation of the data associated with the RT_VERSION entry |
Cfixed_file_info_t | This structure represents the VS_FIXEDFILEINFO structure defined in verrsrc.h |
CResourcesManager | The Resource Manager provides an enhanced API to manipulate the resource tree |
Cstring_entry_t | This structure represent an entry in the string table (RT_STRING) |
CRichEntry | Class which represents an entry associated to the RichHeader |
CRichHeader | Class which represents the not-so-documented rich header |
CSection | Class which represents a PE section |
CAttribute | Interface over PKCS #7 attribute |
CContentType | Interface over the structure described by the OID 1.2.840.113549.1.9.3 (PKCS #9) |
CGenericType | Interface over an attribute for which the internal structure is not supported by LIEF |
CMsCounterSign | This class exposes the MS Counter Signature attribute |
CMsManifestBinaryID | Interface over the structure described by the OID 1.3.6.1.4.1.311.10.3.28 (szOID_PLATFORM_MANIFEST_BINARY_ID) |
CMsSpcNestedSignature | Interface over the structure described by the OID 1.3.6.1.4.1.311.2.4.1 |
CMsSpcStatementType | Interface over the structure described by the OID 1.3.6.1.4.1.311.2.1.11 |
CPKCS9AtSequenceNumber | Interface over the structure described by the OID 1.2.840.113549.1.9.25.4 (PKCS #9) |
CPKCS9CounterSignature | Interface over the structure described by the OID 1.2.840.113549.1.9.6 (PKCS #9) |
CPKCS9MessageDigest | Interface over the structure described by the OID 1.2.840.113549.1.9.4 (PKCS #9) |
CPKCS9SigningTime | Interface over the structure described by the OID 1.2.840.113549.1.9.5 (PKCS #9) |
CSigningCertificateV2 | SigningCertificateV2 ::= SEQUENCE { certs SEQUENCE OF ESSCertIDv2, policies SEQUENCE OF PolicyInformation OPTIONAL } |
CSpcRelaxedPeMarkerCheck | |
CSpcSpOpusInfo | Interface over the structure described by the OID 1.3.6.1.4.1.311.2.1.12 |
CContentInfo | |
CContent | |
CGenericContent | |
CPKCS9TSTInfo | Interface over the structure described by the OID 1.2.840.113549.1.9.16.1.4 (PKCS #9) |
CRsaInfo | Object that wraps a RSA key |
CSignature | Main interface for the PKCS #7 signature scheme |
CSignatureParser | |
CSignerInfo | |
CSpcIndirectData | |
Cx509 | Interface over a x509 certificate |
CTLS | Class which represents the PE Thread Local Storage |
NMachO | Namespace related to the LIEF's Mach-O module |
CAtomInfo | Class which represents the LC_ATOM_INFO command |
CBinary | Class which represents a MachO binary |
Crange_t | |
CKeyCmp | |
CBinaryParser | Class used to parse a single binary (i.e. non-FAT) |
CBindingInfo | Class that provides an interface over a binding operation |
CBindingInfoIterator | |
CBuilder | Class used to rebuild a Mach-O file |
Cconfig_t | Options to tweak the building process |
CBuildToolVersion | Class that represents a tool's version that was involved in the build of the binary |
CBuildVersion | |
CChainedBindingInfo | This class represents a symbol binding operation associated with the LC_DYLD_CHAINED_FIXUPS command |
CChainedPointerAnalysis | |
Cdyld_chained_ptr_arm64e_rebase_t | |
Cdyld_chained_ptr_arm64e_bind_t | |
Cdyld_chained_ptr_arm64e_auth_rebase_t | |
Cdyld_chained_ptr_arm64e_auth_bind_t | |
Cdyld_chained_ptr_64_rebase_t | |
Cdyld_chained_ptr_arm64e_bind24_t | |
Cdyld_chained_ptr_arm64e_auth_bind24_t | |
Cdyld_chained_ptr_64_bind_t | |
Cdyld_chained_ptr_64_kernel_cache_rebase_t | |
Cdyld_chained_ptr_32_rebase_t | |
Cdyld_chained_ptr_32_bind_t | |
Cdyld_chained_ptr_32_cache_rebase_t | |
Cdyld_chained_ptr_32_firmware_rebase_t | |
Cdyld_chained_ptr_arm64e_segmented_rebase_t | |
Cdyld_chained_ptr_arm64e_auth_segmented_rebase_t | |
Cunion_pointer_t | |
CCodeSignature | |
CCodeSignatureDir | |
CDataCodeEntry | Interface over an entry in the DataInCode command |
CDataInCode | Interface of the LC_DATA_IN_CODE command This command is used to list slices of code sections that contain data. The slices information are stored as an array of DataCodeEntry |
CDyldBindingInfo | This class represents a symbol binding operation associated with the LC_DYLD_INFO bytecode |
CDyldChainedFixups | Class that represents the LC_DYLD_CHAINED_FIXUPS command |
Cchained_starts_in_segment | Structure that mirrors the raw dyld_chained_starts_in_segment which aims at providing information about the chained rebase/bind fixups |
CDyldChainedFixupsCreator | |
Cbinding_info_t | |
Creloc_info_t | |
CDyldEnvironment | Class that represents a LC_DYLD_ENVIRONMENT command which is used by the Mach-O linker/loader to initialize an environment variable |
CDyldExportsTrie | Class that represents the LC_DYLD_EXPORTS_TRIE command |
CDyldInfo | Class that represents the LC_DYLD_INFO and LC_DYLD_INFO_ONLY commands |
CDylibCommand | Class which represents a library dependency |
CDylinkerCommand | Class that represents the Mach-O linker, also named loader. Most of the time, DylinkerCommand::name() should return /usr/lib/dyld |
CDynamicSymbolCommand | Class that represents the LC_DYSYMTAB command |
CEncryptionInfo | Class that represents the LC_ENCRYPTION_INFO / LC_ENCRYPTION_INFO_64 commands |
CExportInfo | Class that provides an interface over the Dyld export info |
CFatBinary | Class which represent a Mach-O (fat) binary This object is also used for representing Mach-O binaries that are NOT FAT |
CFilesetCommand | Class associated with the LC_FILESET_ENTRY commands |
CFunctionStarts | Class which represents the LC_FUNCTION_STARTS command |
CFunctionVariantFixups | Class which represents the LC_FUNCTION_VARIANT_FIXUPS command |
CFunctionVariants | Class representing the LC_FUNCTION_VARIANTS load command |
CRuntimeTableEntry | This class exposes information about a given implementation |
CRuntimeTable | Represents a runtime table of function variants sharing a common namespace (referred to internally as FunctionVariantsRuntimeTable in dyld) |
CHash | Class which implements a visitor to compute a deterministic hash for LIEF MachO objects |
CHeader | Class that represents the Mach-O header |
CIndirectBindingInfo | This class represents a binding operation infered from the indirect symbol table |
CLinkEdit | |
CLinkerOptHint | Class which represents the LC_LINKER_OPTIMIZATION_HINT command |
CLoadCommand | Based class for the Mach-O load commands |
CMainCommand | Class that represent the LC_MAIN command. This kind of command can be used to determine the entrypoint of an executable |
CNoteCommand | Class that represent the LC_NOTE command |
CParser | The main interface to parse a Mach-O binary |
CParserConfig | This structure is used to tweak the MachO Parser (MachO::Parser) |
CRelocation | Class that represents a Mach-O relocation |
CRelocationDyld | Class that represents a relocation found in the DyldInfo structure |
CRelocationFixup | Class that represents a rebase relocation found in the LC_DYLD_CHAINED_FIXUPS command |
CRelocationObject | Class that represents a relocation presents in the MachO object file (.o). Usually, this kind of relocation is found in the MachO::Section |
CRoutine | Class that represents the LC_ROUTINE/LC_ROUTINE64 commands. Accodring to the Mach-O loader.h documentation: |
CRPathCommand | Class that represents the LC_RPATH command |
CSection | Class that represents a Mach-O section |
CSegmentCommand | Class which represents a LoadCommand::TYPE::SEGMENT / LoadCommand::TYPE::SEGMENT_64 command |
CSegmentSplitInfo | Class that represents the LoadCommand::TYPE::SEGMENT_SPLIT_INFO command |
CSourceVersion | Class that represents the MachO LoadCommand::TYPE::SOURCE_VERSION This command is used to provide the version of the sources used to build the binary |
CStub | This class represents a stub entry in sections like __stubs,__auth_stubs |
Ctarget_info_t | |
CIterator | |
CSubClient | Class that represents the SubClient command. Accodring to the Mach-O loader.h documentation: |
CSubFramework | Class that represents the SubFramework command. Accodring to the Mach-O loader.h documentation: |
CSymbol | Class that represents a Symbol in a Mach-O file |
CSymbolCommand | Class that represents the LC_SYMTAB command |
CThreadCommand | Class that represents the LC_THREAD / LC_UNIXTHREAD commands and that can be used to get the binary entrypoint when the LC_MAIN (MainCommand) is not present |
CTwoLevelHints | Class which represents the LC_TWOLEVEL_HINTS command |
CUnknownCommand | Generic class when the command is not recognized by LIEF |
CUUIDCommand | Class that represents the UUID command |
CVersionMin | Class that wraps the LC_VERSION_MIN_MACOSX, LC_VERSION_MIN_IPHONEOS, ... commands |
NART | Namespace related to the LIEF's ART module |
Ndetails | |
NART_17 | |
NJava | Namespace related to the Java part of ART 17 |
Cbrooks_read_barrier_t | |
Cjobject_t | |
Cjobject_t< no_brooks_read_barrier_t > | |
Cno_brooks_read_barrier_t | |
CFile | |
CHash | |
CHeader | |
CParser | Class which parses an ART file and transform into a ART::File object |
NCOFF | |
CAuxiliarySymbol | Class that represents an auxiliary symbol |
CAuxiliarybfAndefSymbol | |
CAuxiliaryCLRToken | Auxiliary symbol associated with the CLR_TOKEN storage class |
CAuxiliaryFile | This auxiliary symbol represents a filename (auxiliary format 4) |
CAuxiliaryFunctionDefinition | This auxiliary symbols marks the beginning of a function definition |
CAuxiliarySectionDefinition | This auxiliary symbol exposes information about the associated section |
CAuxiliaryWeakExternal | "Weak externals" are a mechanism for object files that allows flexibility at link time. A module can contain an unresolved external symbol (sym1), but it can also include an auxiliary record that indicates that if sym1 is not present at link time, another external symbol (sym2) is used to resolve references instead |
CBigObjHeader | This class represents the header for a COFF object compiled with /bigobj support (i.e. the number of sections can exceed 65536) |
CBinary | Class that represents a COFF Binary |
CHeader | Class that represents the COFF header. It is subclassed by LIEF::COFF::RegularHeader and LIEF::COFF::BigObjHeader for normal vs /bigobj files |
CParser | |
CParserConfig | Class used to configure the COFF parser |
CRegularHeader | This class represents the COFF header for non-bigobj |
CRelocation | This class represents a COFF relocation |
CSection | This class represents a COFF section |
CComdatInfo | This structure wraps comdat information which is composed of the symbol associated with the comdat section and its selection flag |
CString | This class represents a string located in the COFF string table |
CSymbol | This class represents a COFF symbol |
Cparsing_context_t | |
NDEX | |
CClass | Class which represents a DEX Class (i.e. a Java/Kotlin class) |
CCodeInfo | |
CField | Class which represent a DEX Field |
CFile | Class that represents a DEX file |
CHash | Class which implements a visitor to compute a deterministic hash for LIEF DEX objects |
CHeader | Class which represents the DEX header. This is the first structure that begins the DEX format |
Cpacked_switch | |
Csparse_switch | |
Cfill_array_data | |
CMapItem | Class which represents an element of the MapList object |
CMapList | Class which represents the map_list structure that follows the main DEX header |
CMethod | Class which represents a DEX::Method |
CParser | Class which parses a DEX file to produce a DEX::File object |
CPrototype | Class which represents a DEX method prototype |
CType | Class which represents a DEX type as described in the format specifications: https://source.android.com/devices/tech/dalvik/dex-format#typedescriptor |
Ndwarf | Namespace for the DWARF debug format |
Neditor | |
CArrayType | This class represents an array type (DW_TAG_array_type) |
CBaseType | This class represents a primitive type like int, char |
CCompilationUnit | This class represents an editable DWARF compilation unit |
CEnumType | This class represents an editable enum type (DW_TAG_enumeration_type) |
CValue | This class represents an enum value |
CFunction | This class represents an editable DWARF function (DW_TAG_subprogram) |
Crange_t | |
CParameter | This class represents a parameter of the current function (DW_TAG_formal_parameter) |
CLexicalBlock | This class mirrors the DW_TAG_lexical_block DWARF tag |
CLabel | This class mirrors the DW_TAG_label DWARF tag |
CFunctionType | This class represents a function type (DW_TAG_subroutine_type) |
CParameter | This class represents a function's parameter |
CPointerType | This class represents a pointer to another type |
CStructType | This class represents a struct-like type which can be: |
CMember | This class represents a member of the struct-like |
CType | This class is the base class for any types created when editing DWARF debug info |
CTypeDef | This class represents a typedef (DW_TAG_typedef) |
CVariable | This class represents an editable DWARF variable which can be scoped by a function or a compilation unit (DW_TAG_variable) |
Nparameters | |
CFormal | This class represents a regular function parameter |
CTemplateValue | This class represents a template value parameter |
CTemplateType | This class represents a template type parameter |
Ntypes | |
CArray | This class represents a DW_TAG_array_type |
Csize_info_t | Structure that wraps information about the dimension of this array |
CAtomic | This class represents a DW_TAG_atomic_type |
CBase | This class wraps the DW_TAG_base_type type which can be used – for instance – to represent integers or primitive types |
CClassLike | This class abstracts a DWARF aggregate: DW_TAG_structure_type, DW_TAG_class_type, DW_TAG_union_type |
CMember | This represents a class/struct/union attribute |
CStructure | This class represents a DWARF struct type (DW_TAG_structure_type) |
CClass | This class represents a DWARF class type (DW_TAG_class_type) |
CUnion | This class represents a DWARF class type (DW_TAG_union_type) |
CPacked | This class represents a DWARF packed type (DW_TAG_packed_type) |
CCoarray | This class represents a DW_TAG_coarray_type |
CConst | This class represents a DW_TAG_const_type |
CDynamic | This class represents a DW_TAG_dynamic_type |
CEnum | This class represents a DW_TAG_enumeration_type |
CFile | This class represents a DW_TAG_file_type |
CImmutable | This class represents a DW_TAG_immutable_type |
CInterface | This class represents a DW_TAG_interface_type |
CPointer | This class represents a DW_TAG_pointer_type DWARF type |
CPointerToMember | This class represents a DW_TAG_ptr_to_member_type |
CReference | This class represents a DW_TAG_reference_type |
CRestrict | This class represents a DW_TAG_restrict_type |
CRValueReference | This class represents a DW_TAG_rvalue_reference_type |
CSetTy | This class represents a DW_TAG_set_type |
CShared | This class represents a DW_TAG_shared_type |
CStringTy | This class represents a DW_TAG_string_type |
CSubroutine | This class represents a DW_TAG_subroutine_type |
CTemplateAlias | This class represents a DW_TAG_template_alias |
CThrown | This class represents a DW_TAG_thrown_type |
CTypedef | This class represents a DW_TAG_typedef type |
CVolatile | This class represents a DW_TAG_volatile_type |
CCompilationUnit | This class represents a DWARF compilation unit |
CIterator | |
CPointerProxy | |
CLanguage | Languages supported by the DWARF (v5) format. See: https://dwarfstd.org/languages.html |
CDebugInfo | This class represents a DWARF debug information. It can embed different compilation units which can be accessed through compilation_units() |
CEditor | This class exposes the main API to create DWARF information |
CFunction | This class represents a DWARF function which can be associated with either: DW_TAG_subprogram or DW_TAG_inlined_subroutine |
CIterator | |
CPointerProxy | |
CParameter | This class represents a DWARF parameter which can be either: |
CScope | This class materializes a scope in which Function, Variable, Type, ... can be defined |
CType | This class represents a DWARF Type which includes: |
CIterator | |
CPointerProxy | |
CVariable | This class represents a DWARF variable which can be owned by a dwarf::Function or a dwarf::CompilationUnit |
CIterator | |
CPointerProxy | |
Ndsc | Namespace related to the dyld shared cache support |
CDyldSharedCache | This class represents a dyld shared cache file |
CDylib | This class represents a library embedded in a dyld shared cache. It mirrors the original dyld_cache_image_info structure |
CIterator | Dylib Iterator |
Cextract_opt_t | This structure is used to tweak the extraction process while calling Dylib::get. These options allow to deoptimize the dylib and get an accurate representation of the origin Mach-O binary |
CMappingInfo | This class represents a dyld_cache_mapping_info entry |
CIterator | MappingInfo Iterator |
CSubCache | This class represents a subcache in the case of large/split dyld shared cache |
CIterator | SubCache Iterator |
NOAT | |
CBinary | |
CClass | |
CDexFile | |
CHash | |
CHeader | |
Celement_t | |
CMethod | |
CParser | Class to parse an OAT file to produce an OAT::Binary |
Nlogging | |
CScoped | |
Nobjc | Namespace related to ObjC metadata |
CClass | This class represents an Objective-C class (@interface) |
CIterator | |
CPointerProxy | |
CDeclOpt | This structure wraps options to tweak the generated output of functions like LIEF::objc::Metadata::to_decl |
CIVar | This class represents an instance variable (ivar) |
CIterator | |
CPointerProxy | |
CMetadata | This class is the main interface to inspect Objective-C metadata |
CMethod | This class represents an Objective-C Method |
CIterator | |
CPointerProxy | |
CProperty | This class represents a @property in Objective-C |
CIterator | |
CPointerProxy | |
CProtocol | This class represents an Objective-C @protocol |
CIterator | |
CPointerProxy | |
NVDEX | |
CFile | Main class for the VDEX module which represents a VDEX file |
CHash | |
CHeader | |
CParser | Class which parse an VDEX file and transform into a VDEX::File object |
Npdb | |
Ntypes | |
CArray | This class represents a LF_ARRAY PDB type |
CAttribute | This class represents an attribute (LF_MEMBER) in an aggregate (class, struct, union, ...) |
CIterator | |
CPointerProxy | |
CBitField | This class represents a LF_BITFIELD PDB type |
CClassLike | This class abstracts the following PDB types: LF_STRUCTURE, LF_INTERFACE, LF_CLASS or LF_UNION |
CStructure | Interface for the LF_STRUCTURE PDB type |
CClass | Interface for the LF_CLASS PDB type |
CInterface | Interface for the LF_INTERFACE PDB type |
CEnum | This class represents a LF_ENUM PDB type |
CFunction | This class represents a LF_PROCEDURE PDB type |
CMethod | This class represents a Method (LF_ONEMETHOD) that can be defined in ClassLike PDB type |
CIterator | |
CPointerProxy | |
CModifier | This class represents a LF_MODIFIER PDB type |
CPointer | This class represents a LF_POINTER PDB type |
CSimple | This class represents a primitive types (int, float, ...) which are also named simple types in the PDB format |
CUnion | This class represents a LF_UNION PDB type |
CBuildMetadata | This class wraps build metadata represented by the codeview symbols: S_COMPILE3, S_COMPILE2, S_BUILDINFO, S_ENVBLOCK |
Cversion_t | This structure represents a version for the backend or the frontend |
Cbuild_info_t | This structure represents information wrapped by the S_BUILDINFO symbol |
CCompilationUnit | This class represents a CompilationUnit (or Module) in a PDB file |
CIterator | |
CPointerProxy | |
CDebugInfo | This class provides an interface for PDB files. One can instantiate this class using LIEF::pdb::load() or LIEF::pdb::DebugInfo::from_file |
CFunction | |
CIterator | |
CPointerProxy | |
CPublicSymbol | This class provides general information (RVA, name) about a symbol from the PDB's public symbol stream (or Public symbol hash stream) |
CIterator | |
CPointerProxy | |
CType | This is the base class for any PDB type |
CIterator | |
CPointerProxy | |
CBinary | Generic interface representing a binary executable |
CDebugInfo | This class provides a generic interface for accessing debug information from different formats such as DWARF and PDB |
CFunction | Class that represents a function in the binary |
CAbstractHash | |
CHeader | |
CParser | Main interface to parse an executable regardless of its format |
CRelocation | Class which represents an abstracted Relocation |
CSection | Class which represents an abstracted section |
CSymbol | This class represents a symbol in an executable format |
CASN1Reader | |
CBinaryStream | Class that is used to a read stream of data from different sources |
CScopedStream | |
CToggleEndianness | |
CFileStream | Stream interface over a std::ifstream |
CMemoryStream | |
CSpanStream | |
CVectorStream | |
Cdebug_location_t | This structure holds a debug location (source filename & line) |
Cresult | Wrapper that contains an Object (T) or an error |
Cok_t | Opaque structure used by ok_error_t |
Cok_error_t | Opaque structure that is used by LIEF to avoid writing result<void> f(...). Instead, it makes the output explicit such as: |
CHash | |
Cvector_iostream | |
CScopeOStream | |
Cref_iterator | Iterator which returns reference on container's values |
Cfilter_iterator | Iterator which return a ref on container's values given predicates |
Citerator_range | |
Citerator_facade_base | CRTP base class which implements the entire standard iterator facade in terms of a minimal subset of the interface |
Citerator_adaptor_base | CRTP base class for adapting an iterator to a different type |
Cpointee_iterator | An iterator type that allows iterating over the pointees via some other iterator |
Cpointer_iterator | |
CObject | |
Coptional | |
Crange_t | |
Clief_version_t | |
CVisitor | |
CElf_Binary_t | |
CElf_DynamicEntry_Array_t | |
CElf_DynamicEntry_Flags_t | |
CElf_DynamicEntry_Library_t | |
CElf_DynamicEntry_Rpath_t | |
CElf_DynamicEntry_RunPath_t | |
CElf_DynamicEntry_SharedObject_t | |
CElf_DynamicEntry_t | |
CElf_Header_t | |
CElf_Section_t | |
CElf_Segment_t | |
CElf_Symbol_t | |
CEnableBitMaskOperators | |
CEnableBitMaskOperators< LIEF::ELF::Section::FLAGS > | |
CEnableBitMaskOperators< LIEF::ELF::Segment::FLAGS > | |
CEnableBitMaskOperators< LIEF::Function::FLAGS > | |
CEnableBitMaskOperators< LIEF::Header::MODES > | |
CEnableBitMaskOperators< LIEF::MachO::ExportInfo::FLAGS > | |
CEnableBitMaskOperators< LIEF::MachO::Header::FLAGS > | |
CEnableBitMaskOperators< LIEF::MachO::Section::FLAGS > | |
CEnableBitMaskOperators< LIEF::MachO::SegmentCommand::FLAGS > | |
CEnableBitMaskOperators< LIEF::MachO::SegmentCommand::VM_PROTECTIONS > | |
CEnableBitMaskOperators< LIEF::PE::ExDllCharacteristics::CHARACTERISTICS > | |
CEnableBitMaskOperators< LIEF::PE::Header::CHARACTERISTICS > | |
CEnableBitMaskOperators< LIEF::PE::OptionalHeader::DLL_CHARACTERISTICS > | |
CEnableBitMaskOperators< LIEF::PE::ResourceAccelerator::FLAGS > | |
CEnableBitMaskOperators< LIEF::PE::ResourceDialog::CONTROL_STYLES > | |
CEnableBitMaskOperators< LIEF::PE::ResourceDialog::DIALOG_STYLES > | |
CEnableBitMaskOperators< LIEF::PE::ResourceDialog::WINDOW_EXTENDED_STYLES > | |
CEnableBitMaskOperators< LIEF::PE::ResourceDialog::WINDOW_STYLES > | |
CEnableBitMaskOperators< LIEF::PE::RuntimeFunctionX64::UNWIND_FLAGS > | |
CEnableBitMaskOperators< LIEF::PE::Section::CHARACTERISTICS > | |
CEnableBitMaskOperators< LIEF::PE::Signature::VERIFICATION_CHECKS > | |
CEnableBitMaskOperators< LIEF::PE::Signature::VERIFICATION_FLAGS > | |
CEnableBitMaskOperators< LIEF::PE::x509::VERIFICATION_FLAGS > | |
CMacho_Binary_t | LIEF::MachO::Binary C Handler |
CMacho_Command_t | |
CMacho_Header_t | |
CMacho_Section_t | |
CMacho_Segment_t | |
CMacho_Symbol_t | |
CPe_Binary_t | LIEF::PE::Binary C Handler |
CPe_DataDirectory_t | |
CPe_DosHeader_t | |
CPe_Header_t | |
CPe_Import_t | |
CPe_ImportEntry_t | |
CPe_OptionalHeader_t | |
CPe_Section_t | |