Add access to gs_base register

GDATASoftwareAG · Jul 19, 2023 · 19cae96 · 19cae96
1 parent ada5e6c
commit 19cae96
Show file tree

Hide file tree

Showing 4 changed files with 11 additions and 0 deletions.
diff --git a/vmicore/src/include/vmicore/vmi/events/IRegisterReadable.h b/vmicore/src/include/vmicore/vmi/events/IRegisterReadable.h
@@ -30,6 +30,8 @@ namespace VmiCore
 
         [[nodiscard]] virtual uint64_t getCr3() const = 0;
 
+        [[nodiscard]] virtual uint64_t getGs() const = 0;
+
       protected:
         IRegisterReadable() = default;
     };

diff --git a/vmicore/src/lib/vmi/Event.cpp b/vmicore/src/lib/vmi/Event.cpp
@@ -56,6 +56,11 @@ namespace VmiCore
         return libvmiEvent->x86_regs->cr3;
     }
 
+    uint64_t Event::getGs() const
+    {
+        return libvmiEvent->x86_regs->gs_base;
+    }
+
     addr_t Event::getGla() const
     {
         switch (libvmiEvent->type)

diff --git a/vmicore/src/lib/vmi/Event.h b/vmicore/src/lib/vmi/Event.h
@@ -34,6 +34,8 @@ namespace VmiCore
 
         [[nodiscard]] uint64_t getCr3() const override;
 
+        [[nodiscard]] uint64_t getGs() const override;
+
         [[nodiscard]] addr_t getGla() const override;
 
         [[nodiscard]] addr_t getGfn() const override;

diff --git a/vmicore/test/include/vmicore_test/vmi/mock_InterruptEvent.h b/vmicore/test/include/vmicore_test/vmi/mock_InterruptEvent.h
@@ -29,6 +29,8 @@ namespace VmiCore
 
         MOCK_METHOD(uint64_t, getCr3, (), (const override));
 
+        MOCK_METHOD(uint64_t, getGs, (), (const override));
+
         MOCK_METHOD(addr_t, getGla, (), (const override));
 
         MOCK_METHOD(addr_t, getGfn, (), (const override));