Class List

Here are the classes, structs, unions and interfaces with brief descriptions:

[detail level 123456]

▼NLIEF	LIEF namespace
►NART	Namespace related to the LIEF's ART module
►Ndetails
►NART_17
►NJava	Namespace related to the Java part of ART 17
Cbrooks_read_barrier_t
Cjobject_t
Cjobject_t< no_brooks_read_barrier_t >
Cno_brooks_read_barrier_t
CFile
CHash
CHeader
CParser	Class which parses an ART file and transform into a ART::File object
►Ndetails
Ccanbe_unique
►NDEX
CClass	Class which represents a DEX Class (i.e. a Java/Kotlin class)
CCodeInfo
CField	Class which represent a DEX Field
CFile	Class that represents a DEX file
Cfill_array_data
CHash	Class which implements a visitor to compute a deterministic hash for LIEF DEX objects
CHeader	Class which represents the DEX header. This is the first structure that begins the DEX format
CMapItem	Class which represents an element of the MapList object
CMapList	Class which represents the map_list structure that follows the main DEX header
CMethod	Class which represents a DEX::Method
Cpacked_switch
CParser	Class which parses a DEX file to produce a DEX::File object
CPrototype	Class which represents a DEX method prototype
Csparse_switch
CType	Class which represents a DEX type as described in the format specifications: https://source.android.com/devices/tech/dalvik/dex-format#typedescriptor
►Ndwarf	Namespace for the DWARF debug format
►Ntypes
CArray	This class represents a DW_TAG_array_type
CBase	This class wraps the DW_TAG_base_type type which can be used – for instance – to represent integers or primitive types
CClass	This class represents a DWARF class type (DW_TAG_class_type)
►CClassLike	This class abstracts a DWARF aggregate: DW_TAG_structure_type, DW_TAG_class_type, DW_TAG_union_type
CMember	This represents a class/struct/union attribute
CConst	This class represents a DW_TAG_const_type
CPointer	This class represents a DW_TAG_pointer_type DWARF type
CStructure	This class represents a DWARF struct type (DW_TAG_structure_type)
CUnion	This class represents a DWARF class type (DW_TAG_union_type)
►CCompilationUnit	This class represents a DWARF compilation unit
►CIterator
CPointerProxy
CLanguage	Languages supported by the DWARF (v5) format. See: https://dwarfstd.org/languages.html
CDebugInfo	This class represents a DWARF debug information. It can embed different compilation units which can be accessed through compilation_units()
►CFunction	This class represents a DWARF function which can be associated with either: DW_TAG_subprogram or DW_TAG_inlined_subroutine
►CIterator
CPointerProxy
CParameter	This class wraps a DWARF function's parameter
CScope	This class materializes a scope in which Function, Variable, Type, ... can be defined
►CType	This class represents a DWARF Type which includes:
►CIterator
CPointerProxy
►CVariable	This class represents a DWARF variable which can be owned by a dwarf::Function or a dwarf::CompilationUnit
►CIterator
CPointerProxy
►NELF	Namespace related to the LIEF's ELF module
CAArch64Feature	This class represents the GNU_PROPERTY_AARCH64_FEATURE_1_AND property
CAndroidIdent	Class representing the ".note.android.ident" section
CBinary	Class which represents an ELF binary
►CBuilder	Class which takes an ELF::Binary object and reconstructs a valid binary
Cconfig_t	Configuration options to tweak the building process
CCoreAuxv	Class representing core auxv object
►CCoreFile	Class representing a core NT_FILE which describes the mapped files of the process
Centry_t	Core file entry
►CCorePrPsInfo	Class representing the NT_PRPSINFO core note. This kind of note represents general information about the process
Cinfo_t
►CCorePrStatus	Class representing core PrPsInfo object
Cpr_status_t
CRegisters
Csiginfo_t
Ctimeval_t
CCoreSigInfo	Class representing a core siginfo object
CDynamicEntry	Class which represents an entry in the dynamic table These entries are located in the .dynamic section or the PT_DYNAMIC segment
CDynamicEntryArray	Class that represent an Array in the dynamic table. This entry is associated with constructors:
CDynamicEntryFlags
CDynamicEntryLibrary	Class which represents a DT_NEEDED entry in the dynamic table
CDynamicEntryRpath	Class which represents a DT_RPATH entry. This attribute is deprecated (cf. man ld) in favour of DT_RUNPATH (See DynamicRunPath)
CDynamicEntryRunPath	Class that represents a DT_RUNPATH wich is used by the loader to resolve libraries (DynamicEntryLibrary)
CDynamicSharedObject	Class which represents a DT_SONAME entry in the dynamic table This kind of entry is usually used to name the original library
CGeneric	This class represents a property which doesn't have a concrete LIEF implementation
CGnuHash	Class which provides a view over the GNU Hash implementation. Most of the fields are read-only since the values are re-computed by the LIEF::ELF::Builder
CHash	Class which implements a visitor to compute a deterministic hash for LIEF ELF objects
CHeader	Class which represents the ELF's header. This class mirrors the raw ELF Elfxx_Ehdr structure
CNeeded
CNote	Class which represents an ELF note. This class can be instantiated using the static Note::create functions
CNoteAbi	Class that wraps the NT_GNU_ABI_TAG note
►CNoteGnuProperty	Class that wraps the NT_GNU_PROPERTY_TYPE_0 note
CProperty	This class wraps the different properties that can be used in a NT_GNU_PROPERTY_TYPE_0 note
CNoteNoCopyOnProtected	This class provides an interface over the GNU_PROPERTY_NO_COPY_ON_PROTECTED property. This property indicates that the linker shouldn't copy relocations against protected symbols
CParser	Class which parses and transforms an ELF file into a ELF::Binary object
CParserConfig	This structure is used to tweak the ELF Parser (ELF::Parser)
CQNXStack	Class representing the QNX QNT_STACK note
CRelocation	Class that represents an ELF relocation
CSection	Class wich represents an ELF Section
CSegment	Class which represents the ELF segments
CStackSize	This class provides an interface over the GNU_PROPERTY_STACK_SIZE property
CSymbol	Class which represents an ELF symbol
CSymbolVersion	Class which represents an entry defined in the DT_VERSYM dynamic entry
CSymbolVersionAux	Class which represents an Auxiliary Symbol version
CSymbolVersionAuxRequirement
CSymbolVersionDefinition	Class which represents an entry defined in DT_VERDEF or .gnu.version_d
CSymbolVersionRequirement	Class which represents an entry in the DT_VERNEED or .gnu.version_r table
CSysvHash	Class which represents the SYSV hash for the symbols resolution
CX86Features	This class interfaces the different GNU_PROPERTY_X86_FEATURE_* properties which includes:
CX86ISA	This class interfaces the different GNU_PROPERTY_X86_ISA_* properties which includes:
►NMachO	Namespace related to the LIEF's Mach-O module
►CBinary	Class which represents a MachO binary
CKeyCmp
Crange_t
CBinaryParser	Class used to parse a single binary (i.e. non-FAT)
CBindingInfo	Class that provides an interface over a binding operation
►CBuilder	Class used to rebuild a Mach-O file
Cconfig_t	Options to tweak the building process
CBuildToolVersion	Class that represents a tool's version that was involved in the build of the binary
CBuildVersion
CChainedBindingInfo	This class represents a symbol binding operation associated with the LC_DYLD_CHAINED_FIXUPS command
CCodeSignature
CCodeSignatureDir
CDataCodeEntry	Interface over an entry in the DataInCode command
CDataInCode	Interface of the LC_DATA_IN_CODE command This command is used to list slices of code sections that contain data. The slices information are stored as an array of DataCodeEntry
CDyldBindingInfo	This class represents a symbol binding operation associated with the LC_DYLD_INFO bytecode
►CDyldChainedFixups	Class that represents the LC_DYLD_CHAINED_FIXUPS command
Cchained_starts_in_segment	Structure that mirrors the raw dyld_chained_starts_in_segment which aims at providing information about the chained rebase/bind fixups
CDyldEnvironment	Class that represents a LC_DYLD_ENVIRONMENT command which is used by the Mach-O linker/loader to initialize an environment variable
CDyldExportsTrie	Class that represents the LC_DYLD_EXPORTS_TRIE command
CDyldInfo	Class that represents the LC_DYLD_INFO and LC_DYLD_INFO_ONLY commands
CDylibCommand	Class which represents a library dependency
CDylinkerCommand	Class that represents the Mach-O linker, also named loader. Most of the time, DylinkerCommand::name() should return /usr/lib/dyld
CDynamicSymbolCommand	Class that represents the LC_DYSYMTAB command
CEncryptionInfo	Class that represents the LC_ENCRYPTION_INFO / LC_ENCRYPTION_INFO_64 commands
CExportInfo	Class that provides an interface over the Dyld export info
CFatBinary	Class which represent a Mach-O (fat) binary This object is also used for representing Mach-O binaries that are NOT FAT
CFilesetCommand	Class associated with the LC_FILESET_ENTRY commands
CFunctionStarts	Class which represents the LC_FUNCTION_STARTS command
CHash	Class which implements a visitor to compute a deterministic hash for LIEF MachO objects
CHeader	Class that represents the Mach-O header
CLinkEdit
CLinkerOptHint	Class which represents the LC_LINKER_OPTIMIZATION_HINT command
CLoadCommand	Based class for the Mach-O load commands
CMainCommand	Class that represent the LC_MAIN command. This kind of command can be used to determine the entrypoint of an executable
CParser	The main interface to parse a Mach-O binary
CParserConfig	This structure is used to tweak the MachO Parser (MachO::Parser)
CRelocation	Class that represents a Mach-O relocation
CRelocationDyld	Class that represents a relocation found in the DyldInfo structure
CRelocationFixup	Class that represents a rebase relocation found in the LC_DYLD_CHAINED_FIXUPS command
CRelocationObject	Class that represents a relocation presents in the MachO object file (.o). Usually, this kind of relocation is found in the MachO::Section
CRPathCommand	Class that represents the LC_RPATH command
CSection	Class that represents a Mach-O section
CSegmentCommand	Class which represents a LoadCommand::TYPE::SEGMENT / LoadCommand::TYPE::SEGMENT_64 command
CSegmentSplitInfo	Class that represents the LoadCommand::TYPE::SEGMENT_SPLIT_INFO command
CSourceVersion	Class that represents the MachO LoadCommand::TYPE::SOURCE_VERSION This command is used to provide the version of the sources used to build the binary
CSubFramework	Class that represents the SubFramework command. Accodring to the Mach-O loader.h documentation:
CSymbol	Class that represents a Symbol in a Mach-O file
CSymbolCommand	Class that represents the LC_SYMTAB command
CThreadCommand	Class that represents the LC_THREAD / LC_UNIXTHREAD commands and that can be used to get the binary entrypoint when the LC_MAIN (MainCommand) is not present
CTwoLevelHints	Class which represents the LC_TWOLEVEL_HINTS command
CUnknownCommand	Generic class when the command is not recognized by LIEF
CUUIDCommand	Class that represents the UUID command
CVersionMin	Class that wraps the LC_VERSION_MIN_MACOSX, LC_VERSION_MIN_IPHONEOS, ... commands
►NOAT
CBinary
CClass
CDexFile
CHash
►CHeader
Celement_t
CMethod
CParser	Class to parse an OAT file to produce an OAT::Binary
►Nobjc
►CClass	This class represents an Objective-C class (@interface)
►CIterator
CPointerProxy
►CIVar	This class represents an instance variable (ivar)
►CIterator
CPointerProxy
CMetadata	This class is the main interface to inspect Objective-C metadata
►CMethod	This class represents an Objective-C Method
►CIterator
CPointerProxy
►CProperty	This class represents a @property in Objective-C
►CIterator
CPointerProxy
►CProtocol	This class represents an Objective-C @protocol
►CIterator
CPointerProxy
►Npdb
►Ntypes
CArray	This class represents a LF_ARRAY PDB type
►CAttribute	This class represents an attribute (LF_MEMBER) in an aggregate (class, struct, union, ...)
►CIterator
CPointerProxy
CBitField	This class represents a LF_BITFIELD PDB type
CClass	Interface for the LF_CLASS PDB type
CClassLike	This class abstracts the following PDB types: LF_STRUCTURE, LF_INTERFACE, LF_CLASS or LF_UNION
CEnum	This class represents a LF_ENUM PDB type
CFunction	This class represents a LF_PROCEDURE PDB type
CInterface	Interface for the LF_INTERFACE PDB type
►CMethod	This class represents a Method (LF_ONEMETHOD) that can be defined in ClassLike PDB type
►CIterator
CPointerProxy
CModifier	This class represents a LF_MODIFIER PDB type
CPointer	This class represents a LF_POINTER PDB type
CSimple	This class represents a primitive types (int, float, ...) which are also named simple types in the PDB format
CStructure	Interface for the LF_STRUCTURE PDB type
CUnion	This class represents a LF_UNION PDB type
►CCompilationUnit	This class represents a CompilationUnit (or Module) in a PDB file
►CIterator
CPointerProxy
CDebugInfo	This class provides an interface for PDB files. One can instantiate this class using LIEF::pdb::load() or LIEF::pdb::DebugInfo::from_file
►CFunction
►CIterator
CPointerProxy
►CPublicSymbol	This class provides general information (RVA, name) about a symbol from the PDB's public symbol stream (or Public symbol hash stream)
►CIterator
CPointerProxy
►CType	This is the base class for any PDB type
►CIterator
CPointerProxy
►NPE	Namespace related to the LIEF's PE module
►Ndetails
Cload_configuration
Cload_configuration_v0
Cload_configuration_v1
Cload_configuration_v10
Cload_configuration_v11
Cload_configuration_v2
Cload_configuration_v3
Cload_configuration_v4
Cload_configuration_v5
Cload_configuration_v6
Cload_configuration_v7
Cload_configuration_v8
Cload_configuration_v9
CAttribute	Interface over PKCS #7 attribute
CAuxiliarySymbol
CBinary	Class which represents a PE binary This is the main interface to manage and modify a PE executable
CBuilder	Class that is used to rebuild a raw PE binary from a PE::Binary object
CCodeIntegrity
CCodeView	Interface for the (generic) Debug CodeView (IMAGE_DEBUG_TYPE_CODEVIEW)
CCodeViewPDB	CodeView PDB specialization
►CContentInfo
CContent
CContentType	Interface over the structure described by the OID 1.2.840.113549.1.9.3 (PKCS #9)
CDataDirectory	Class that represents a PE data directory entry
CDebug	This class represents a generic entry in the debug data directory. For known types, this class is extended to provide a dedicated API (see: ! CodeCodeView)
CDelayImport	Class that represents a PE delayed import
CDelayImportEntry	Class that represents an entry (i.e. an import) in the delay import table (DelayImport)
CDosHeader	Class which represents the DosHeader, the first structure presents at the beginning of a PE file
CExport	Class which represents a PE Export
►CExportEntry	Class which represents a PE Export entry (cf. PE::Export)
Cforward_information_t
CGenericContent
CGenericType	Interface over an attribute for which the internal structure is not supported by LIEF
CHash	Class which implements a visitor to compute a deterministic hash for LIEF PE objects
CHeader	Class that represents the PE header (which follows the DosHeader)
CImport	Class that represents a PE import
CImportEntry	Class that represents an entry (i.e. an import) in the import table (Import)
CLangCodeItem	Class which represents the childs of the ResourceStringFileInfo
CLoadConfiguration	Class that represents the default PE's LoadConfiguration
CLoadConfigurationV0	LoadConfiguration enhanced with SEH
CLoadConfigurationV1	LoadConfiguration enhanced with Control Flow Guard
CLoadConfigurationV10
CLoadConfigurationV11
CLoadConfigurationV2	LoadConfiguration enhanced with code integrity
CLoadConfigurationV3	LoadConfiguration with Control Flow Guard improved
CLoadConfigurationV4	Load Configuration enhanced with
CLoadConfigurationV5	Load Configuration enhanced with Return Flow Guard
CLoadConfigurationV6	Load Configuration enhanced with Hotpatch and improved RFG
CLoadConfigurationV7
CLoadConfigurationV8
CLoadConfigurationV9
CMsCounterSign	This class exposes the MS Counter Signature attribute
CMsManifestBinaryID	Interface over the structure described by the OID 1.3.6.1.4.1.311.10.3.28 (szOID_PLATFORM_MANIFEST_BINARY_ID)
CMsSpcNestedSignature	Interface over the structure described by the OID 1.3.6.1.4.1.311.2.4.1
CMsSpcStatementType	Interface over the structure described by the OID 1.3.6.1.4.1.311.2.1.11
COptionalHeader	Class which represents the PE OptionalHeader structure
CParser	Main interface to parse PE binaries. In particular the static functions: Parser::parse should be used to get a LIEF::PE::Binary
CParserConfig	This structure is used to tweak the PE Parser (PE::Parser)
CPKCS9AtSequenceNumber	Interface over the structure described by the OID 1.2.840.113549.1.9.25.4 (PKCS #9)
CPKCS9CounterSignature	Interface over the structure described by the OID 1.2.840.113549.1.9.6 (PKCS #9)
CPKCS9MessageDigest	Interface over the structure described by the OID 1.2.840.113549.1.9.4 (PKCS #9)
CPKCS9SigningTime	Interface over the structure described by the OID 1.2.840.113549.1.9.5 (PKCS #9)
CPKCS9TSTInfo	Interface over the structure described by the OID 1.2.840.113549.1.9.16.1.4 (PKCS #9)
CPogo	This class represents a Profile Guided Optimization entry from the debug directory (IMAGE_DEBUG_TYPE_POGO)
CPogoEntry
CRelocation	Class which represents the Base Relocation Block We usually find this structure in the .reloc section
CRelocationEntry	Class which represents an entry of the PE relocation table
CRepro	This class represents a reproducible build entry from the debug directory. (IMAGE_DEBUG_TYPE_REPRO). This entry is usually generated with the undocumented /Brepro linker flag
CResourceAccelerator
CResourceData	Class which represents a Data Node in the PE resources tree
CResourceDialog	Representation of a dialog box
CResourceDialogItem	This class represents an item in the ResourceDialog
CResourceDirectory
CResourceFixedFileInfo	Representation of VS_FIXEDFILEINFO Structure
CResourceIcon
CResourceNode	Class which represents a Node in the resource tree
CResourcesManager	The Resource Manager provides an enhanced API to manipulate the resource tree
CResourceStringFileInfo	Representation of the StringFileInfo structure
CResourceStringTable
CResourceVarFileInfo	This object describes information about languages supported by the application
CResourceVersion	Representation of the data associated with the RT_VERSION entry
CRichEntry	Class which represents an entry associated to the RichHeader
CRichHeader	Class which represents the not-so-documented rich header
CRsaInfo	Object that wraps a RSA key
CSection	Class which represents a PE section
CSignature	Main interface for the PKCS #7 signature scheme
CSignatureParser
CSignerInfo
CSigningCertificateV2	SigningCertificateV2 ::= SEQUENCE { certs SEQUENCE OF ESSCertIDv2, policies SEQUENCE OF PolicyInformation OPTIONAL }
CSpcIndirectData
CSpcRelaxedPeMarkerCheck
CSpcSpOpusInfo	Interface over the structure described by the OID 1.3.6.1.4.1.311.2.1.12
CSymbol	Class that represents a PE symbol
CTLS	Class which represents the PE Thread Local Storage
Cx509	Interface over a x509 certificate
►NVDEX
CFile	Main class for the VDEX module which represents a VDEX file
CHash
CHeader
CParser	Class which parse an VDEX file and transform into a VDEX::File object
CAbstractHash
CASN1Reader
CBinary	Abstract binary that exposes an uniform API for the different executable file formats
CBinaryStream	Class that is used to a read stream of data from different sources
Cdebug_location_t	This structure holds a debug location (source filename & line)
CDebugInfo
CFileStream	Stream interface over a std::ifstream
Cfilter_iterator	Iterator which return a ref on container's values given predicates
CFunction	Class that represents a function in the binary
CHash
CHeader
Citerator_range
CMemoryStream
CObject
Cok_t	Opaque structure used by ok_error_t
CParser	Main interface to parse an executable regardless of its format
Crange_t
Cref_iterator	Iterator which returns reference on container's values
CRelocation	Class which represents an abstracted Relocation
CScopedStream
CSection	Class which represents an abstracted section
CSpanStream
CSymbol	This class represents a symbol in an executable format
Cvector_iostream
CVectorStream
CVisitor
CElf_Binary_t
CElf_DynamicEntry_Array_t
CElf_DynamicEntry_Flags_t
CElf_DynamicEntry_Library_t
CElf_DynamicEntry_Rpath_t
CElf_DynamicEntry_RunPath_t
CElf_DynamicEntry_SharedObject_t
CElf_DynamicEntry_t
CElf_Header_t
CElf_Section_t
CElf_Segment_t
CElf_Symbol_t
CEnableBitMaskOperators
CEnableBitMaskOperators< LIEF::ELF::Section::FLAGS >
CEnableBitMaskOperators< LIEF::ELF::Segment::FLAGS >
CEnableBitMaskOperators< LIEF::MachO::ExportInfo::FLAGS >
CEnableBitMaskOperators< LIEF::MachO::Header::FLAGS >
CEnableBitMaskOperators< LIEF::MachO::Section::FLAGS >
CEnableBitMaskOperators< LIEF::MachO::SegmentCommand::FLAGS >
CEnableBitMaskOperators< LIEF::MachO::SegmentCommand::VM_PROTECTIONS >
CEnableBitMaskOperators< LIEF::PE::ACCELERATOR_FLAGS >
CEnableBitMaskOperators< LIEF::PE::Header::CHARACTERISTICS >
CEnableBitMaskOperators< LIEF::PE::LoadConfigurationV1::IMAGE_GUARD >
CEnableBitMaskOperators< LIEF::PE::OptionalHeader::DLL_CHARACTERISTICS >
CEnableBitMaskOperators< LIEF::PE::Section::CHARACTERISTICS >
CEnableBitMaskOperators< LIEF::PE::Signature::VERIFICATION_CHECKS >
CEnableBitMaskOperators< LIEF::PE::Signature::VERIFICATION_FLAGS >
CEnableBitMaskOperators< LIEF::PE::x509::VERIFICATION_FLAGS >
CMacho_Binary_t	LIEF::MachO::Binary C Handler
CMacho_Command_t
CMacho_Header_t
CMacho_Section_t
CMacho_Segment_t
CMacho_Symbol_t
CPe_Binary_t	LIEF::PE::Binary C Handler
CPe_DataDirectory_t
CPe_DosHeader_t
CPe_Header_t
CPe_Import_t
CPe_ImportEntry_t
CPe_OptionalHeader_t
CPe_Section_t