|
LIEF: Library to Instrument Executable Formats Version 0.15.0
|
| ▼NLIEF | LIEF namespace |
| ►NART | Namespace related to the LIEF's ART module |
| CFile | |
| CHash | |
| CHeader | |
| CParser | Class which parses an ART file and transform into a ART::File object |
| ►NELF | Namespace related to the LIEF's ELF module |
| CAArch64Feature | This class represents the GNU_PROPERTY_AARCH64_FEATURE_1_AND property |
| CAndroidIdent | Class representing the ".note.android.ident" section |
| CBinary | Class which represents an ELF binary |
| ►CBuilder | Class which takes an ELF::Binary object and reconstructs a valid binary |
| Cconfig_t | Configuration options to tweak the building process |
| CCoreAuxv | Class representing core auxv object |
| ►CCoreFile | Class representing a core NT_FILE which describes the mapped files of the process |
| Centry_t | Core file entry |
| ►CCorePrPsInfo | Class representing the NT_PRPSINFO core note. This kind of note represents general information about the process |
| Cinfo_t | |
| ►CCorePrStatus | Class representing core PrPsInfo object |
| Cpr_status_t | |
| CRegisters | |
| Csiginfo_t | |
| Ctimeval_t | |
| CCoreSigInfo | Class representing a core siginfo object |
| CDynamicEntry | Class which represents an entry in the dynamic table These entries are located in the .dynamic section or the PT_DYNAMIC segment |
| CDynamicEntryArray | Class that represent an Array in the dynamic table. This entry is associated with constructors: |
| CDynamicEntryFlags | |
| CDynamicEntryLibrary | Class which represents a DT_NEEDED entry in the dynamic table |
| CDynamicEntryRpath | Class which represents a DT_RPATH entry. This attribute is deprecated (cf. man ld) in favour of DT_RUNPATH (See DynamicRunPath) |
| CDynamicEntryRunPath | Class that represents a DT_RUNPATH wich is used by the loader to resolve libraries (DynamicEntryLibrary) |
| CDynamicSharedObject | Class which represents a DT_SONAME entry in the dynamic table This kind of entry is usually used to name the original library |
| CGeneric | This class represents a property which doesn't have a concrete LIEF implementation |
| CGnuHash | Class which provides a view over the GNU Hash implementation. Most of the fields are read-only since the values are re-computed by the LIEF::ELF::Builder |
| CHash | Class which implements a visitor to compute a deterministic hash for LIEF ELF objects |
| CHeader | Class which represents the ELF's header. This class mirrors the raw ELF Elfxx_Ehdr structure |
| CNeeded | |
| CNote | Class which represents an ELF note. This class can be instantiated using the static Note::create functions |
| CNoteAbi | Class that wraps the NT_GNU_ABI_TAG note |
| ►CNoteGnuProperty | Class that wraps the NT_GNU_PROPERTY_TYPE_0 note |
| CProperty | This class wraps the different properties that can be used in a NT_GNU_PROPERTY_TYPE_0 note |
| CNoteNoCopyOnProtected | This class provides an interface over the GNU_PROPERTY_NO_COPY_ON_PROTECTED property. This property indicates that the linker shouldn't copy relocations against protected symbols |
| CParser | Class which parses and transforms an ELF file into a ELF::Binary object |
| CParserConfig | This structure is used to tweak the ELF Parser (ELF::Parser) |
| CRelocation | Class that represents an ELF relocation |
| CSection | Class wich represents an ELF Section |
| CSegment | Class which represents the ELF segments |
| CStackSize | This class provides an interface over the GNU_PROPERTY_STACK_SIZE property |
| CSymbol | Class which represents an ELF symbol |
| CSymbolVersion | Class which represents an entry defined in the DT_VERSYM dynamic entry |
| CSymbolVersionAux | Class which represents an Auxiliary Symbol version |
| CSymbolVersionAuxRequirement | |
| CSymbolVersionDefinition | Class which represents an entry defined in DT_VERDEF or .gnu.version_d |
| CSymbolVersionRequirement | Class which represents an entry in the DT_VERNEED or .gnu.version_r table |
| CSysvHash | Class which represents the SYSV hash for the symbols resolution |
| CX86Features | This class interfaces the different GNU_PROPERTY_X86_FEATURE_* properties which includes: |
| CX86ISA | This class interfaces the different GNU_PROPERTY_X86_ISA_* properties which includes: |
| ►NMachO | Namespace related to the LIEF's Mach-O module |
| ►CBinary | Class which represents a MachO binary |
| CKeyCmp | |
| Crange_t | |
| CBinaryParser | Class used to parse a single binary (i.e. non-FAT) |
| CBindingInfo | Class that provides an interface over a binding operation |
| ►CBuilder | Class used to rebuild a Mach-O file |
| Cconfig_t | Options to tweak the building process |
| CBuildToolVersion | Class that represents a tool's version that was involved in the build of the binary |
| CBuildVersion | |
| CChainedBindingInfo | This class represents a symbol binding operation associated with the LC_DYLD_CHAINED_FIXUPS command |
| CCodeSignature | |
| CCodeSignatureDir | |
| CDataCodeEntry | Interface over an entry in the DataInCode command |
| CDataInCode | Interface of the LC_DATA_IN_CODE command This command is used to list slices of code sections that contain data. The slices information are stored as an array of DataCodeEntry |
| CDyldBindingInfo | This class represents a symbol binding operation associated with the LC_DYLD_INFO bytecode |
| ►CDyldChainedFixups | Class that represents the LC_DYLD_CHAINED_FIXUPS command |
| Cchained_starts_in_segment | Structure that mirrors the raw dyld_chained_starts_in_segment which aims at providing information about the chained rebase/bind fixups |
| CDyldEnvironment | Class that represents a LC_DYLD_ENVIRONMENT which is used by the Mach-O linker/loader to initialize an environment variable |
| CDyldExportsTrie | Class that represents the LC_DYLD_EXPORTS_TRIE command |
| CDyldInfo | Class that represents the LC_DYLD_INFO and LC_DYLD_INFO_ONLY commands |
| CDylibCommand | Class which represents a library dependency |
| CDylinkerCommand | Class that represents the Mach-O linker, also named loader Most of the time, DylinkerCommand::name() returns /usr/lib/dyld |
| CDynamicSymbolCommand | Class that represents the LC_DYSYMTAB command |
| CEncryptionInfo | Class that represents the LC_ENCRYPTION_INFO / LC_ENCRYPTION_INFO_64 commands |
| CExportInfo | Class that provides an interface over the Dyld export info |
| CFatBinary | Class which represent a Mach-O (fat) binary This object is also used for representing Mach-O binaries that are NOT FAT |
| CFilesetCommand | Class associated with the LC_FILESET_ENTRY commands |
| CFunctionStarts | Class which represents the LC_FUNCTION_STARTS command |
| CHash | Class which implements a visitor to compute a deterministic hash for LIEF MachO objects |
| CHeader | Class that represents the Mach-O header |
| CLinkEdit | |
| CLinkerOptHint | Class which represents the LC_LINKER_OPTIMIZATION_HINT command |
| CLoadCommand | Based class for the Mach-O load commands |
| CMainCommand | Class that represent the LC_MAIN command. This kind of command can be used to determine the entrypoint of an executable |
| CParser | The main interface to parse a Mach-O binary |
| CParserConfig | This structure is used to tweak the MachO Parser (MachO::Parser) |
| CRelocation | Class that represents a Mach-O relocation |
| CRelocationDyld | Class that represents a relocation found in the DyldInfo structure |
| CRelocationFixup | Class that represents a rebase relocation found in the LC_DYLD_CHAINED_FIXUPS command |
| CRelocationObject | Class that represents a relocation presents in the MachO object file (.o). Usually, this kind of relocation is found in the MachO::Section |
| CRPathCommand | Class that represents the LC_RPATH command |
| CSection | Class that represents a Mach-O section |
| CSegmentCommand | Class which represents a LoadCommand::TYPE::SEGMENT / LoadCommand::TYPE::SEGMENT_64 command |
| CSegmentSplitInfo | Class that represents the LoadCommand::TYPE::SEGMENT_SPLIT_INFO command |
| CSourceVersion | Class that represents the MachO LoadCommand::TYPE::SOURCE_VERSION This command is used to provide the version of the sources used to build the binary |
| CSubFramework | Class that represents the SubFramework command. Accodring to the Mach-O loader.h documentation: |
| CSymbol | Class that represents a Symbol in a Mach-O file |
| CSymbolCommand | Class that represents the LC_SYMTAB command |
| CThreadCommand | Class that represents the LC_THREAD / LC_UNIXTHREAD commands and that can be used to get the binary entrypoint when the LC_MAIN (MainCommand) is not present |
| CTwoLevelHints | Class which represents the LC_TWOLEVEL_HINTS command |
| CUUIDCommand | Class that represents the UUID command |
| CVersionMin | Class that wraps the LC_VERSION_MIN_MACOSX, LC_VERSION_MIN_IPHONEOS, ... commands |
| ►NPE | Namespace related to the LIEF's PE module |
| CAttribute | Interface over PKCS #7 attribute |
| CAuxiliarySymbol | |
| CBinary | Class which represents a PE binary This is the main interface to manage and modify a PE executable |
| CBuilder | Class that is used to rebuild a raw PE binary from a PE::Binary object |
| CCodeIntegrity | |
| CCodeView | Interface for the (Generic) Debug CodeView (IMAGE_DEBUG_TYPE_CODEVIEW) |
| CCodeViewPDB | CodeView PDB specialization |
| ►CContentInfo | |
| CContent | |
| CContentType | Interface over the structure described by the OID 1.2.840.113549.1.9.3 (PKCS #9) |
| CDataDirectory | Class that represents a PE data directory entry |
| CDebug | This class represents a generic entry in the debug data directory. For known types, this class is extended to provide a dedicated API (see: ! CodeCodeView) |
| CDelayImport | Class that represents a PE delayed import |
| CDelayImportEntry | Class that represents an entry (i.e. an import) in the delay import table (DelayImport) |
| CDosHeader | Class which represents the DosHeader, the first structure presents at the beginning of a PE file |
| CExport | Class which represents a PE Export |
| ►CExportEntry | Class which represents a PE Export entry (cf. PE::Export) |
| Cforward_information_t | |
| CGenericContent | |
| CGenericType | Interface over an attribute for which the internal structure is not supported by LIEF |
| CHash | Class which implements a visitor to compute a deterministic hash for LIEF PE objects |
| CHeader | Class that represents the PE header (which follows the DosHeader) |
| CImport | Class that represents a PE import |
| CImportEntry | Class that represents an entry (i.e. an import) in the import table (Import) |
| CLangCodeItem | Class which represents the childs of the ResourceStringFileInfo |
| CLoadConfiguration | Class that represents the default PE's LoadConfiguration |
| CLoadConfigurationV0 | LoadConfiguration enhanced with SEH |
| CLoadConfigurationV1 | LoadConfiguration enhanced with Control Flow Guard |
| CLoadConfigurationV10 | |
| CLoadConfigurationV11 | |
| CLoadConfigurationV2 | LoadConfiguration enhanced with code integrity |
| CLoadConfigurationV3 | LoadConfiguration with Control Flow Guard improved |
| CLoadConfigurationV4 | Load Configuration enhanced with |
| CLoadConfigurationV5 | Load Configuration enhanced with Return Flow Guard |
| CLoadConfigurationV6 | Load Configuration enhanced with Hotpatch and improved RFG |
| CLoadConfigurationV7 | |
| CLoadConfigurationV8 | |
| CLoadConfigurationV9 | |
| CMsSpcNestedSignature | Interface over the structure described by the OID 1.3.6.1.4.1.311.2.4.1 |
| CMsSpcStatementType | Interface over the structure described by the OID 1.3.6.1.4.1.311.2.1.11 |
| COptionalHeader | Class which represents the PE OptionalHeader structure |
| CParser | Main interface to parse PE binaries. In particular the static functions: Parser::parse should be used to get a LIEF::PE::Binary |
| CParserConfig | This structure is used to tweak the PE Parser (PE::Parser) |
| CPKCS9AtSequenceNumber | Interface over the structure described by the OID 1.2.840.113549.1.9.25.4 (PKCS #9) |
| CPKCS9CounterSignature | Interface over the structure described by the OID 1.2.840.113549.1.9.6 (PKCS #9) |
| CPKCS9MessageDigest | Interface over the structure described by the OID 1.2.840.113549.1.9.4 (PKCS #9) |
| CPKCS9SigningTime | Interface over the structure described by the OID 1.2.840.113549.1.9.5 (PKCS #9) |
| CPogo | This class represents a Profile Guided Optimization entry from the debug directory (IMAGE_DEBUG_TYPE_POGO) |
| CPogoEntry | |
| CRelocation | Class which represents the Base Relocation Block We usually find this structure in the .reloc section |
| CRelocationEntry | Class which represents an entry of the PE relocation table |
| CRepro | This class represents a reproducible build entry from the debug directory. (IMAGE_DEBUG_TYPE_REPRO). This entry is usually generated with the undocumented /Brepro linker flag |
| CResourceAccelerator | |
| CResourceData | Class which represents a Data Node in the PE resources tree |
| CResourceDialog | Representation of a dialog box |
| CResourceDialogItem | This class represents an item in the ResourceDialog |
| CResourceDirectory | |
| CResourceFixedFileInfo | Representation of VS_FIXEDFILEINFO Structure |
| CResourceIcon | |
| CResourceNode | Class which represents a Node in the resource tree |
| CResourcesManager | The Resource Manager provides an enhanced API to manipulate the resource tree |
| CResourceStringFileInfo | Representation of the StringFileInfo structure |
| CResourceStringTable | |
| CResourceVarFileInfo | This object describes information about languages supported by the application |
| CResourceVersion | Representation of the data associated with the RT_VERSION entry |
| CRichEntry | Class which represents an entry associated to the RichHeader |
| CRichHeader | Class which represents the not-so-documented rich header |
| CRsaInfo | Object that wraps a RSA key |
| CSection | Class which represents a PE section |
| CSignature | Main interface for the PKCS #7 signature scheme |
| CSignatureParser | |
| CSignerInfo | |
| CSpcIndirectData | |
| CSpcSpOpusInfo | Interface over the structure described by the OID 1.3.6.1.4.1.311.2.1.12 |
| CSymbol | Class that represents a PE symbol |
| CTLS | Class which represents the PE Thread Local Storage |
| Cx509 | Interface over a x509 certificate |
| CAbstractHash | |
| CASN1Reader | |
| CBinary | Abstract binary that exposes an uniform API for the different executable file formats |
| CBinaryStream | Class that is used to a read stream of data from different sources |
| CFileStream | Stream interface over a std::ifstream |
| Cfilter_iterator | Iterator which return a ref on container's values given predicates |
| CFunction | Class that represents a function in the binary |
| CHash | |
| CHeader | |
| CMemoryStream | |
| CObject | |
| Cok_t | Opaque structure used by ok_error_t |
| CParser | Main interface to parse an executable regardless of its format |
| Cref_iterator | Iterator which returns reference on container's values |
| CRelocation | Class which represents an abstracted Relocation |
| CScopedStream | |
| CSection | Class which represents an abstracted section |
| CSpanStream | |
| CSymbol | This class represents a symbol in an executable format |
| Cvector_iostream | |
| CVectorStream | |
| CVisitor |
1.10.0