mirror of
https://github.com/shirou/gopsutil.git
synced 2025-04-26 13:48:59 +08:00
01cf95a92d
go build ./... with GOARCH=arm64 is otherwise failing with the following: process\process_windows.go:412:11: undefined: readProcessMemory process\process_windows.go:425:11: undefined: readProcessMemory process\process_windows.go:896:32: undefined: PROCESS_MEMORY_COUNTERS process\process_windows.go:897:10: undefined: PROCESS_MEMORY_COUNTERS process\process_windows.go:910:50: undefined: PROCESS_MEMORY_COUNTERS process\process_windows.go:950:21: undefined: queryPebAddress process\process_windows.go:955:9: undefined: readProcessMemory process\process_windows.go:961:8: undefined: readProcessMemory process\process_windows.go:969:21: undefined: queryPebAddress process\process_windows.go:974:9: undefined: readProcessMemory process\process_windows.go:974:9: too many errors
110 lines
2.9 KiB
Go
110 lines
2.9 KiB
Go
//go:build (windows && 386) || (windows && arm)
|
|
// +build windows,386 windows,arm
|
|
|
|
package process
|
|
|
|
import (
|
|
"errors"
|
|
"syscall"
|
|
"unsafe"
|
|
|
|
"golang.org/x/sys/windows"
|
|
|
|
"github.com/shirou/gopsutil/v3/internal/common"
|
|
)
|
|
|
|
type PROCESS_MEMORY_COUNTERS struct {
|
|
CB uint32
|
|
PageFaultCount uint32
|
|
PeakWorkingSetSize uint32
|
|
WorkingSetSize uint32
|
|
QuotaPeakPagedPoolUsage uint32
|
|
QuotaPagedPoolUsage uint32
|
|
QuotaPeakNonPagedPoolUsage uint32
|
|
QuotaNonPagedPoolUsage uint32
|
|
PagefileUsage uint32
|
|
PeakPagefileUsage uint32
|
|
}
|
|
|
|
func queryPebAddress(procHandle syscall.Handle, is32BitProcess bool) (uint64, error) {
|
|
if is32BitProcess {
|
|
// we are on a 32-bit process reading an external 32-bit process
|
|
var info processBasicInformation32
|
|
|
|
ret, _, _ := common.ProcNtQueryInformationProcess.Call(
|
|
uintptr(procHandle),
|
|
uintptr(common.ProcessBasicInformation),
|
|
uintptr(unsafe.Pointer(&info)),
|
|
uintptr(unsafe.Sizeof(info)),
|
|
uintptr(0),
|
|
)
|
|
if status := windows.NTStatus(ret); status == windows.STATUS_SUCCESS {
|
|
return uint64(info.PebBaseAddress), nil
|
|
} else {
|
|
return 0, windows.NTStatus(ret)
|
|
}
|
|
} else {
|
|
// we are on a 32-bit process reading an external 64-bit process
|
|
if common.ProcNtWow64QueryInformationProcess64.Find() == nil { // avoid panic
|
|
var info processBasicInformation64
|
|
|
|
ret, _, _ := common.ProcNtWow64QueryInformationProcess64.Call(
|
|
uintptr(procHandle),
|
|
uintptr(common.ProcessBasicInformation),
|
|
uintptr(unsafe.Pointer(&info)),
|
|
uintptr(unsafe.Sizeof(info)),
|
|
uintptr(0),
|
|
)
|
|
if status := windows.NTStatus(ret); status == windows.STATUS_SUCCESS {
|
|
return info.PebBaseAddress, nil
|
|
} else {
|
|
return 0, windows.NTStatus(ret)
|
|
}
|
|
} else {
|
|
return 0, errors.New("can't find API to query 64 bit process from 32 bit")
|
|
}
|
|
}
|
|
}
|
|
|
|
func readProcessMemory(h syscall.Handle, is32BitProcess bool, address uint64, size uint) []byte {
|
|
if is32BitProcess {
|
|
var read uint
|
|
|
|
buffer := make([]byte, size)
|
|
|
|
ret, _, _ := common.ProcNtReadVirtualMemory.Call(
|
|
uintptr(h),
|
|
uintptr(address),
|
|
uintptr(unsafe.Pointer(&buffer[0])),
|
|
uintptr(size),
|
|
uintptr(unsafe.Pointer(&read)),
|
|
)
|
|
if int(ret) >= 0 && read > 0 {
|
|
return buffer[:read]
|
|
}
|
|
} else {
|
|
// reading a 64-bit process from a 32-bit one
|
|
if common.ProcNtWow64ReadVirtualMemory64.Find() == nil { // avoid panic
|
|
var read uint64
|
|
|
|
buffer := make([]byte, size)
|
|
|
|
ret, _, _ := common.ProcNtWow64ReadVirtualMemory64.Call(
|
|
uintptr(h),
|
|
uintptr(address&0xFFFFFFFF), // the call expects a 64-bit value
|
|
uintptr(address>>32),
|
|
uintptr(unsafe.Pointer(&buffer[0])),
|
|
uintptr(size), // the call expects a 64-bit value
|
|
uintptr(0), // but size is 32-bit so pass zero as the high dword
|
|
uintptr(unsafe.Pointer(&read)),
|
|
)
|
|
if int(ret) >= 0 && read > 0 {
|
|
return buffer[:uint(read)]
|
|
}
|
|
}
|
|
}
|
|
|
|
// if we reach here, an error happened
|
|
return nil
|
|
}
|