mirror of
https://github.com/NohamR/Reclass.git
synced 2026-05-10 19:59:21 +00:00
5f1fd56171
Provider base address now stays in sync with tree base address when changed via ChangeBase command, fixing reads from arbitrary memory regions like KUSER_SHARED_DATA at 0x7FFE0000. ReadProcessMemory handles partial reads gracefully. Snapshot extent uses tree-based calculation instead of provider size to avoid oversized reads. MCP source.switch gains pid parameter for programmatic process attach. MCP server starts by default with logging and slow mode support. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
88 lines
2.8 KiB
C++
88 lines
2.8 KiB
C++
#pragma once
|
|
#include <QByteArray>
|
|
#include <QString>
|
|
#include <cstdint>
|
|
#include <cstring>
|
|
|
|
namespace rcx {
|
|
|
|
class Provider {
|
|
public:
|
|
virtual ~Provider() = default;
|
|
|
|
// --- Subclasses MUST implement these two ---
|
|
virtual bool read(uint64_t addr, void* buf, int len) const = 0;
|
|
virtual int size() const = 0;
|
|
|
|
// --- Optional overrides ---
|
|
virtual bool write(uint64_t addr, const void* buf, int len) {
|
|
Q_UNUSED(addr); Q_UNUSED(buf); Q_UNUSED(len);
|
|
return false;
|
|
}
|
|
virtual bool isWritable() const { return false; }
|
|
|
|
// Human-readable label for this source.
|
|
// Examples: "notepad.exe", "dump.bin", "tcp://10.0.0.1:1337"
|
|
virtual QString name() const { return {}; }
|
|
|
|
// Whether data can change externally (e.g. live process, network socket).
|
|
// Auto-refresh is only active for live providers.
|
|
virtual bool isLive() const { return false; }
|
|
|
|
// Category tag for the command row Source span.
|
|
// Examples: "File", "Process", "Socket"
|
|
virtual QString kind() const { return QStringLiteral("File"); }
|
|
|
|
// Base address for providers that offset reads (e.g. process memory).
|
|
// For file/buffer providers this is always 0.
|
|
virtual uint64_t base() const { return 0; }
|
|
virtual void setBase(uint64_t newBase) { Q_UNUSED(newBase); }
|
|
|
|
// Resolve an absolute address to a symbol name.
|
|
// Returns empty string if no symbol is known.
|
|
// ProcessProvider: "ntdll.dll+0x1A30"
|
|
// BufferProvider: "" (no symbols in flat files)
|
|
virtual QString getSymbol(uint64_t addr) const {
|
|
Q_UNUSED(addr);
|
|
return {};
|
|
}
|
|
|
|
// --- Derived convenience (non-virtual, never override) ---
|
|
|
|
bool isValid() const { return size() > 0; }
|
|
|
|
virtual bool isReadable(uint64_t addr, int len) const {
|
|
if (len <= 0) return (len == 0);
|
|
uint64_t ulen = (uint64_t)len;
|
|
return addr <= (uint64_t)size() && ulen <= (uint64_t)size() - addr;
|
|
}
|
|
|
|
template<typename T>
|
|
T readAs(uint64_t addr) const {
|
|
T v{};
|
|
read(addr, &v, sizeof(T));
|
|
return v;
|
|
}
|
|
|
|
uint8_t readU8 (uint64_t a) const { return readAs<uint8_t>(a); }
|
|
uint16_t readU16(uint64_t a) const { return readAs<uint16_t>(a); }
|
|
uint32_t readU32(uint64_t a) const { return readAs<uint32_t>(a); }
|
|
uint64_t readU64(uint64_t a) const { return readAs<uint64_t>(a); }
|
|
float readF32(uint64_t a) const { return readAs<float>(a); }
|
|
double readF64(uint64_t a) const { return readAs<double>(a); }
|
|
|
|
QByteArray readBytes(uint64_t addr, int len) const {
|
|
if (len <= 0) return {};
|
|
QByteArray buf(len, Qt::Uninitialized);
|
|
if (!read(addr, buf.data(), len))
|
|
buf.fill('\0');
|
|
return buf;
|
|
}
|
|
|
|
bool writeBytes(uint64_t addr, const QByteArray& d) {
|
|
return write(addr, d.constData(), d.size());
|
|
}
|
|
};
|
|
|
|
} // namespace rcx
|