kernelcache.kernelcache module¶

Class	Description
`binaryninja.kernelcache.kernelcache.CacheImage`
`binaryninja.kernelcache.kernelcache.CacheSymbol`
`binaryninja.kernelcache.kernelcache.KernelCacheController`

Function	Description
`binaryninja.kernelcache.kernelcache.image_from_api`
`binaryninja.kernelcache.kernelcache.image_to_api`
`binaryninja.kernelcache.kernelcache.symbol_from_api`
`binaryninja.kernelcache.kernelcache.symbol_to_api`

CacheImage¶

class CacheImage[source]¶

Bases: object

CacheImage(name: str, header_virtual_address: int, header_file_address: int)

__init__(name: str, header_virtual_address: int, header_file_address: int) → None¶

Parameters:

name (str) –
header_virtual_address (int) –
header_file_address (int) –

Return type:

None

header_file_address: int¶

header_virtual_address: int¶

name: str¶

CacheSymbol¶

class CacheSymbol[source]¶

Bases: object

CacheSymbol(symbol_type: ctypes.c_int, address: int, name: str)

__init__(symbol_type: c_int, address: int, name: str) → None¶

Parameters:

symbol_type (c_int) –
address (int) –
name (str) –

Return type:

None

address: int¶

name: str¶

symbol_type: c_int¶

KernelCacheController¶

class KernelCacheController[source]¶

Bases: object

__init__(view: BinaryView)[source]¶

Retrieve the shared cache controller for a given view. Call is_valid to check if the controller is valid.

Parameters:: view (BinaryView) –

apply_image(view: BinaryView, image: CacheImage) → bool[source]¶

Parameters:

view (BinaryView) –
image (CacheImage) –

Return type:

bool

get_image_at(address: int) → CacheImage | None[source]¶

Parameters:: address (int) –
Return type:: CacheImage | None

get_image_containing(address: int) → CacheImage | None[source]¶

Parameters:: address (int) –
Return type:: CacheImage | None

get_image_dependencies(image: CacheImage) → [<class 'str'>][source]¶

Returns a list of image names that this image depends on.

Parameters:: image (CacheImage) –
Return type:: [<class ‘str’>]

get_image_with_name(name: str) → CacheImage | None[source]¶

Parameters:: name (str) –
Return type:: CacheImage | None

get_symbol_at(address: int) → CacheSymbol | None[source]¶

Parameters:: address (int) –
Return type:: CacheSymbol | None

get_symbol_with_name(name: str) → CacheSymbol | None[source]¶

Parameters:: name (str) –
Return type:: CacheSymbol | None

is_image_loaded(image: CacheImage) → bool[source]¶

Parameters:: image (CacheImage) –
Return type:: bool

is_valid() → bool[source]¶

Return type:: bool

property images: [<class 'binaryninja.kernelcache.kernelcache.CacheImage'>]¶

property loaded_images: [<class 'binaryninja.kernelcache.kernelcache.CacheImage'>]¶: Get a list of images that are currently loaded in the view.

property symbols: [<class 'binaryninja.kernelcache.kernelcache.CacheSymbol'>]¶

image_from_api¶

image_from_api(image: BNKernelCacheImage) → CacheImage[source]¶

Parameters:: image (BNKernelCacheImage) –
Return type:: CacheImage

image_to_api¶

image_to_api(image: CacheImage) → BNKernelCacheImage[source]¶

Parameters:: image (CacheImage) –
Return type:: BNKernelCacheImage

symbol_from_api¶

symbol_from_api(symbol: BNKernelCacheSymbol) → CacheSymbol[source]¶

Parameters:: symbol (BNKernelCacheSymbol) –
Return type:: CacheSymbol

symbol_to_api¶

symbol_to_api(symbol: CacheSymbol) → BNKernelCacheSymbol[source]¶

Parameters:: symbol (CacheSymbol) –
Return type:: BNKernelCacheSymbol