Struct object::read::macho::DyldCache

pub struct DyldCache<'data, E = Endianness, R = &'data [u8]>
where
    E: Endian,
    R: ReadRef<'data>,
{
    endian: E,
    data: R,
    subcaches: Vec<DyldSubCache<'data, E, R>>,
    mappings: &'data [DyldCacheMappingInfo<E>],
    images: &'data [DyldCacheImageInfo<E>],
    arch: Architecture,
}

A parsed representation of the dyld shared cache.

Fields

endian: E

data: R

subcaches: Vec<DyldSubCache<'data, E, R>>

mappings: &'data [DyldCacheMappingInfo<E>]

images: &'data [DyldCacheImageInfo<E>]

arch: Architecture

Implementations

impl<'data, E, R> DyldCache<'data, E, R>

where E: Endian, R: ReadRef<'data>,

pub fn parse(data: R, subcache_data: &[R]) -> Result<Self>

Parse the raw dyld shared cache data.

For shared caches from macOS 12 / iOS 15 and above, the subcache files need to be supplied as well, in the correct order, with the .symbols subcache last (if present). For example, data would be the data for dyld_shared_cache_x86_64, and subcache_data would be the data for [dyld_shared_cache_x86_64.1, dyld_shared_cache_x86_64.2, ...].

pub fn architecture(&self) -> Architecture

Get the architecture type of the file.

pub fn endianness(&self) -> Endianness

Get the endianness of the file.

pub fn is_little_endian(&self) -> bool

Return true if the file is little endian, false if it is big endian.

pub fn images<'cache>( &'cache self, ) -> DyldCacheImageIterator<'data, 'cache, E, R>

Iterate over the images in this cache.

pub fn data_and_offset_for_address(&self, address: u64) -> Option<(R, u64)>

Find the address in a mapping and return the cache or subcache data it was found in, together with the translated file offset.

Trait Implementations

impl<'data, E, R> Debug for DyldCache<'data, E, R>

where E: Endian + Debug, R: ReadRef<'data> + Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.