n4r1b / ferrisetw

Basically a KrabsETW rip-off written in Rust
Other
63 stars 20 forks source link

Provide access to stack traces of arbitrary size in extended data items. #124

Closed yjugl closed 6 months ago

yjugl commented 6 months ago

The current StackTrace32(_) and StackTrace64(_) definitions yield a value of the inner item type exposed by the windows crate. This type is autogenerated from the C definition, which uses an ANYSIZE_ARRAY (a constant defined as 1). As a side effect, a value of the autogenerated Rust type can only contain a single address from the captured call stack.

yjugl commented 6 months ago

Example of using the new StackTraceItem<u64>: here