@@ -121,6 +121,7 @@ void kd_api_write_msr(CPUState *cpu, PacketData *pd);
void kd_api_search_memory(CPUState *cpu, PacketData *pd);
void kd_api_fill_memory(CPUState *cpu, PacketData *pd);
void kd_api_unsupported(CPUState *cpu, PacketData *pd);
+void kd_api_query_memory(CPUState *cpu, PacketData *pd);
SizedBuf kd_gen_exception_sc(CPUState *cpu);
SizedBuf kd_gen_load_symbols_sc(CPUState *cpu);
@@ -1606,6 +1606,20 @@ void kd_api_fill_memory(CPUState *cpu, PacketData *pd)
pd->extra_size = 0;
}
+void kd_api_query_memory(CPUState *cpu, PacketData *pd)
+{
+ DBGKD_QUERY_MEMORY *mem = &pd->m64.u.QueryMemory;
+
+ if (ldl_p(&mem->AddressSpace) == DBGKD_QUERY_MEMORY_VIRTUAL) {
+ mem->AddressSpace = DBGKD_QUERY_MEMORY_PROCESS;
+ mem->Flags = DBGKD_QUERY_MEMORY_READ |
+ DBGKD_QUERY_MEMORY_WRITE |
+ DBGKD_QUERY_MEMORY_EXECUTE;
+ mem->AddressSpace = ldl_p(&mem->AddressSpace);
+ mem->Flags = ldl_p(&mem->Flags);
+ }
+}
+
void kd_api_unsupported(CPUState *cpu, PacketData *pd)
{
WINDBG_ERROR("Catched unimplemented api %s",
@@ -213,6 +213,10 @@ static void windbg_process_manipulate_packet(ParsingContext *ctx)
kd_api_fill_memory(cpu, &ctx->data);
break;
+ case DbgKdQueryMemoryApi:
+ kd_api_query_memory(cpu, &ctx->data);
+ break;
+
default:
kd_api_unsupported(cpu, &ctx->data);
break;