ExceptionDirWrapper.h

Go to the documentation of this file.

#pragma once
 
#include "DataDirEntryWrapper.h"
 
class ExceptionEntryWrapper;
class ExceptionDirWrapper;
 
class ExceptionDirWrapper : public DataDirEntryWrapper
{
public:
    ExceptionDirWrapper(PEFile* pe)
        : DataDirEntryWrapper(pe, pe::DIR_EXCEPTION), parsedSize(0) { wrap(); }
 
    bool wrap();
 
    virtual void* getPtr();
    virtual bufsize_t getSize() { return parsedSize; }
 
    virtual QString getName() { return "Exceptions Dir."; }
    virtual size_t getFieldsCount() { return entries.size(); }
 
    virtual void* getFieldPtr(size_t fieldId, size_t subField) { return getSubfieldPtr(fieldId, subField); }
    virtual QString getFieldName(size_t fieldId) { return "Exceptions Block"; }
    virtual QString getFieldName(size_t fieldId, size_t subField) { return getSubfieldName(fieldId, subField); }
 
private:
    bufsize_t parsedSize;
 
friend class ExceptionEntryWrapper;
};
 
#define ARM_XDATA_FLAG 0x3
    
class ExceptionEntryWrapper : public ExeNodeWrapper
{
public:
    // fields :
    enum ExceptionBlockFID_Intel {
        NONE = FIELD_NONE,
        BEGIN_ADDR,
        END_ADDR,
        UNWIND_INFO_ADDR,
        FIELD_COUNTER
    };
    
    enum ExceptionBlockFID_Arm64 {
        ARM_EXCEPT_NONE = FIELD_NONE,
        ARM_EXCEPT_START = ExceptionEntryWrapper::BEGIN_ADDR,
        ARM_EXCEPT_XDATA = ExceptionEntryWrapper::END_ADDR,
        ARM_EXCEPT_FIELD_COUNTER
    };
 
    ExceptionEntryWrapper(Executable *pe, ExceptionDirWrapper *parentDir, size_t entryNumber)
        : ExeNodeWrapper(pe, parentDir, entryNumber), cachedRaw(INVALID_ADDR) { this->parentDir = parentDir;}
 
    bool wrap() { return true; }
 
    // full structure boundaries
    virtual void* getPtr();
 
    virtual bufsize_t getSize();
    virtual QString getName() { return "Exceptions Block"; }
    virtual size_t getFieldsCount();
    virtual size_t getSubFieldsCount() { return 1; }
 
    // specific field boundaries
    virtual void* getFieldPtr(size_t fieldId, size_t subField = FIELD_NONE);
    virtual QString getFieldName(size_t fieldId);
    virtual Executable::addr_type containsAddrType(size_t fieldId, size_t subField);
 
private:
    bufsize_t _getSize();
    offset_t cachedRaw;
    ExceptionDirWrapper* parentDir;
};