ept.h

Go to the documentation of this file.

// Copyright (c) 2015-2017, Satoshi Tanda. All rights reserved.
// Use of this source code is governed by a MIT-style license that can be
// found in the LICENSE file.


#ifndef HYPERPLATFORM_EPT_H_
#define HYPERPLATFORM_EPT_H_

#include <fltKernel.h>

extern "C" {
//
// macro utilities
//

//
// constants and macros
//

//
// types
//

struct EptData;

union EptCommonEntry {
  ULONG64 all;
  struct {
    ULONG64 read_access : 1;       
    ULONG64 write_access : 1;      
    ULONG64 execute_access : 1;    
    ULONG64 memory_type : 3;       
    ULONG64 reserved1 : 6;         
    ULONG64 physial_address : 36;  
    ULONG64 reserved2 : 16;        
  } fields;
};
static_assert(sizeof(EptCommonEntry) == 8, "Size check");

//
// prototypes
//

_IRQL_requires_max_(PASSIVE_LEVEL) bool EptIsEptAvailable();

ULONG64 EptGetEptPointer(_In_ EptData* ept_data);

_IRQL_requires_max_(PASSIVE_LEVEL) void EptInitializeMtrrEntries();

_IRQL_requires_max_(PASSIVE_LEVEL) EptData* EptInitialization();

void EptTermination(_In_ EptData* ept_data);

_IRQL_requires_min_(DISPATCH_LEVEL) void EptHandleEptViolation(
    _In_ EptData* ept_data);

EptCommonEntry* EptGetEptPtEntry(_In_ EptData* ept_data,
                                 _In_ ULONG64 physical_address);

//
// variables
//

//
// implementations
//

}  // extern "C"

#endif  // HYPERPLATFORM_EPT_H_