systract

package

v1.0.2 Latest Latest Go to latest Published: Dec 1, 2019 License: MIT Imports: 14 Imported by: 2

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Package systract provides libraries to extract syscalls from go applications programmatically.

This section is empty.

This section is empty.

This section is empty.

type DumpReader struct {
	// contains filtered or unexported fields
}

DumpReader represents a go disassembled files reader

func NewDumpReader(dumpFilePath string) *DumpReader

NewDumpReader initialises a new DumpReader

func (d *DumpReader) GetReader() (io.ReadCloser, error)

GetReader returns a io.Reader based of the filePath

type ExeReader struct {
	// contains filtered or unexported fields
}

ExeReader represents a go executables reader. Internally it will call go tool objdump in order to get a disassembled dump of the file.

func NewExeReader(exeFilePath string) *ExeReader

NewExeReader initialises a new ExeReader

func (e *ExeReader) GetReader() (io.ReadCloser, error)

GetReader returns a io.ReadCloser based of the filePath

type SourceReader interface {
	GetReader() (io.ReadCloser, error)
}

SourceReader defines the interface for source readers

type SystemCall struct {
	ID   uint16
	Name string
}

SystemCall represents a system call

func Extract(source SourceReader) ([]SystemCall, error)

Extract returns all system calls made in the execution path of the dumpFile provided.