n4r1b / ferrisetw

Basically a KrabsETW rip-off written in Rust
Other
65 stars 24 forks source link

Provide access to stack traces of arbitrary size in extended data items. #124

Closed yjugl closed 8 months ago

yjugl commented 8 months ago

The current StackTrace32(_) and StackTrace64(_) definitions yield a value of the inner item type exposed by the windows crate. This type is autogenerated from the C definition, which uses an ANYSIZE_ARRAY (a constant defined as 1). As a side effect, a value of the autogenerated Rust type can only contain a single address from the captured call stack.

yjugl commented 8 months ago

Example of using the new StackTraceItem<u64>: here