Loading...
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 | /* * Copyright (c) 2015 Apple Inc. All rights reserved. * * @APPLE_OSREFERENCE_LICENSE_HEADER_START@ * * This file contains Original Code and/or Modifications of Original Code * as defined in and that are subject to the Apple Public Source License * Version 2.0 (the 'License'). You may not use this file except in * compliance with the License. The rights granted to you under the License * may not be used to create, or enable the creation or redistribution of, * unlawful or unlicensed copies of an Apple operating system, or to * circumvent, violate, or enable the circumvention or violation of, any * terms of an Apple operating system software license agreement. * * Please obtain a copy of the License at * http://www.opensource.apple.com/apsl/ and read it before using this file. * * The Original Code and all software distributed under the License are * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. * Please see the License for the specific language governing rights and * limitations under the License. * * @APPLE_OSREFERENCE_LICENSE_HEADER_END@ */ #ifndef _KDD_H_ #define _KDD_H_ #import <Foundation/Foundation.h> #import <kcdata.h> /*! * @class KCDataType * A basic abstraction that allows for parsing data provided by kernel chunked * data library. * * @discussion * Each type object has a name and a method to parse and populate data in memory to * a dictionary. The dictionary will have keys as NSStrings and values could be NSObject * */ @interface KCDataType : NSObject - (NSDictionary * _Nullable)parseData:(void * _Nonnull)dataBuffer ofLength:(uint32_t)length NS_RETURNS_RETAINED; - (NSString * _Nonnull)name; - (unsigned int)typeID; - (BOOL) shouldMergeData; @end /*! * @function getKCDataTypeForID * * @abstract * Find a type description for give TypeID * * @param typeID * A unsinged int type specified by the KCDATA. * * @discussion * This routine queries the system for a give type. If a known type description is found it will be used to * initialize a KCDataType object. If no known type is found it assumes the data is uint8_t[]. */ KCDataType * _Nullable getKCDataTypeForID(uint32_t typeID); /*! * @function KCDataTypeNameForID * * @abstract * Get a name for the type. * * @param typeID * A unsinged int type specified by the KCDATA. * * @return NSString * * Returns name of the type. If a type is not found the return * value will be string object of the passed value. */ NSString * _Nonnull KCDataTypeNameForID(uint32_t typeID) NS_RETURNS_NOT_RETAINED; /*! * @function parseKCDataArray * * @abstract * Parse the given KCDATA buffer as an Array of element. The buffer should begin with header * of type KCDATA_TYPE_ARRAY. * * @param iter * An iterator into the input buffer * * @param error * Error return. * * @return * A dictionary with key specifying name of the type of each elements and value is an Array of data. * */ NSMutableDictionary * _Nullable parseKCDataArray(kcdata_iter_t iter, NSError * _Nullable * _Nullable error) NS_RETURNS_RETAINED; /*! * @function parseKCDataContainer * * @abstract * Parse the given KCDATA buffer as a container and convert each sub structures as fields in a dictionary. * * @param iter * A pointer to an iterator into the input buffer. The iterator will be updated * to point at the container end marker. * * @param error * Error return. * * @return NSDictionary * * containing each field and potentially sub containers within the provided container. * * @discussion * This function tries to parse one container. If it encounters sub containers * they will be parsed and collected within the same dictionary. * Other data type fields will also be parsed based on their type. * */ NSMutableDictionary * _Nullable parseKCDataContainer(kcdata_iter_t * _Nonnull iter, NSError * _Nullable * _Nullable error) NS_RETURNS_RETAINED; /*! * @function parseKCDataBuffer * * @abstract * Parse complete KCDATA buffer into NSMutableDictionary. Depending on the size of buffer and elements * this routine makes allocations for objects and strings. * * @param dataBuffer * A pointer in memory where KCDATA is allocated. The data should be of type * kcdata_item_t and have KCDATA_BUFFER_BEGIN_* tags (see kern_cdata.h) * * @param size * Size of the buffer as provided by kernel api. * * @return NSDictionary * * Dictionary with key:value pairs for each data item. KCDATA_TYPE_ARRAY and KCDATA_TYPE_CONTAINERS will * grouped and recursed as much possible. For unknown types NSData object is returned with "Type_0x123" * as keys. * * @discussion * This function tries to parse KCDATA buffer with known type description. If an error occurs, * NULL is returned, and error (if not NULL) will have the error string. * * Iff the buffer does begin with a known kcdata magic number, the error code * will be KERN_INVALID_VALUE. * */ NSDictionary * _Nullable parseKCDataBuffer(void * _Nonnull dataBuffer, uint32_t size, NSError * _Nullable * _Nullable error) NS_RETURNS_RETAINED; #endif /* _KDD_H_ */ |