vmi_get_va_pages does not return all pages
28 views
Skip to first unread message
manch...@gmail.com
Jan 14, 2018, 7:06:16 PM1/14/18
to vmitools
Hi,
I want to catch VMI_MEMACCESS_X events to all pages of a process.
I planned on doing so by iterating the pages returned from vmi_get_va_pages
and add memory access traps to them. However I noted that I am missing a big
range of pages, especially the userspace ones (0x0 -> 0x7FFFFFFF) pages from
vmi_get_va_pages. Any idea on how to get user space pages, and why aren't
they shown in vmi_get_va_pages ?
I want to catch VMI_MEMACCESS_X events to all pages of a process.
I planned on doing so by iterating the pages returned from vmi_get_va_pages
and add memory access traps to them. However I noted that I am missing a big
range of pages, especially the userspace ones (0x0 -> 0x7FFFFFFF) pages from
vmi_get_va_pages. Any idea on how to get user space pages, and why aren't
they shown in vmi_get_va_pages ?
Reply all
Reply to author
Forward
0 new messages