class documentation

class Match(object):

View In Hierarchy

Represents a slice of memory that matches a specific pattern during some portion of the trace.

Matches are typically produced by Search.matches().

Method __init__ Undocumented
Method __str__ Undocumented
Method accesses A generator of the reven2.memhist.MemoryAccesses that read from the slice while it was matching with the pattern.
Method format_as_html This method gets an html formatting string representation for this class instance.
Property creation_transition Property: The reven2.trace.Transition that make the slice match the pattern, or None if the slice was alreadying matching the pattern in the from_context of the search.
Property destruction_transition Property: The reven2.trace.Transition that make the slice stop matching the pattern, or None if the slice matches the pattern until the to_context of the search.
Property first_context Property: The first reven2.trace.Context where this slice matches the pattern.
Property id Property: The unique id of the pattern in the Search instance that produced it.
Property known_mapped_context Property: A reven2.trace.Context where it's known that the virtual_start_address is mapped, or None, if unknown.
Property last_context Property: The last reven2.trace.Context where this slice matches the pattern.
Property pattern The pattern that the slice matches with.
Property physical_end_address Property: The reven2.address.PhysicalAddress of the first byte after the slice that matches the pattern.
Property physical_range Property: The physical range of memory that matches the pattern
Property physical_start_address Property: The reven2.address.PhysicalAddress of the first byte of the slice that matches the pattern.
Property size_byte Property: The size of the match, in byte.
Property virtual_end_address Property: The reven2.address.LinearAddress of the first byte after the slice that matches the pattern, or None, if the match was created by a physical write.
Property virtual_range Property: The virtual range of memory that matches the pattern, or None, if the match was created by a physical write.
Property virtual_start_address Property: The reven2.address.LinearAddress of the first byte of the slice that matches the pattern, or None, if the match was created by a physical write.
Method _repr_html_ Representation used by Jupyter Notebook when an instance of this class is displayed in a cell.
Instance Variable _accesses Undocumented
Instance Variable _creation_transition Undocumented
Instance Variable _current_search Undocumented
Instance Variable _destruction_transition Undocumented
Instance Variable _id Undocumented
Instance Variable _pattern Undocumented
Instance Variable _physical_start_address Undocumented
Instance Variable _virtual_start_address Undocumented
def __init__(self, match_id, physical_address, pattern, current_search, virtual_address):

Undocumented

Parameters
match_idUndocumented
physical_address:_address.PhysicalAddressUndocumented
pattern:bytesUndocumented
current_searchUndocumented
virtual_address:_Optional[_address.VirtualAddress]Undocumented
def __str__(self):

Undocumented

def accesses(self):

A generator of the reven2.memhist.MemoryAccesses that read from the slice while it was matching with the pattern.

def format_as_html(self):

This method gets an html formatting string representation for this class instance.

Information

Returns
String
@property
creation_transition =

Property: The reven2.trace.Transition that make the slice match the pattern, or None if the slice was alreadying matching the pattern in the from_context of the search.

@property
destruction_transition =

Property: The reven2.trace.Transition that make the slice stop matching the pattern, or None if the slice matches the pattern until the to_context of the search.

@property
first_context =

Property: The first reven2.trace.Context where this slice matches the pattern.

@property
id =

Property: The unique id of the pattern in the Search instance that produced it.

@property
known_mapped_context =

Property: A reven2.trace.Context where it's known that the virtual_start_address is mapped, or None, if unknown.

@property
last_context =

Property: The last reven2.trace.Context where this slice matches the pattern.

Note

For Matches that are still alive in searches that are not completed, this will be updated as the search progresses

@property
pattern: bytes =

The pattern that the slice matches with.

@property
physical_end_address: _address.PhysicalAddress =

Property: The reven2.address.PhysicalAddress of the first byte after the slice that matches the pattern.

@property
physical_range: _MemoryRange[_address.PhysicalAddress] =

Property: The physical range of memory that matches the pattern

@property
physical_start_address: _address.PhysicalAddress =

Property: The reven2.address.PhysicalAddress of the first byte of the slice that matches the pattern.

@property
size_byte =

Property: The size of the match, in byte.

Note

>>> self.physical_end_address == self.physical_start_address + self.size_byte
True
@property
virtual_end_address: _Optional[_address.VirtualAddress] =

Property: The reven2.address.LinearAddress of the first byte after the slice that matches the pattern, or None, if the match was created by a physical write.

@property
virtual_range: _Optional[_MemoryRange[_address.VirtualAddress]] =

Property: The virtual range of memory that matches the pattern, or None, if the match was created by a physical write.

@property
virtual_start_address: _Optional[_address.VirtualAddress] =

Property: The reven2.address.LinearAddress of the first byte of the slice that matches the pattern, or None, if the match was created by a physical write.

def _repr_html_(self):

Representation used by Jupyter Notebook when an instance of this class is displayed in a cell.

_accesses: _List[_memhist.MemoryAccess] =

Undocumented

_creation_transition =

Undocumented

_current_search =

Undocumented

_destruction_transition =

Undocumented

_id =

Undocumented

_pattern =

Undocumented

_physical_start_address =

Undocumented

_virtual_start_address =

Undocumented