CODEWITHSUNDEEP
cmacosmemoryaddress-space
nux
nux

Reputation: 375

filename of memory mapped libraries osx

I need to get the filenames of all memory mapped libraries of the current application. Currently I'm going through all mapped libraries via vm_region. Sadly it doesn't provide information about the filename of the current region. Is there a way to get this information in c without doing popen on vmmap ?

Upvotes: 5

Views: 1392

Answers (2)

Jake
Jake

Reputation: 2236

Here's how you can use libproc.h and proc_pidinfo() to list the mmapped files:

#include <stdio.h>
#include <stdlib.h>
#include <libproc.h>

int main (int argc, char **argv) {
    if (argc < 2) exit(1);
    int pid = atoi(argv[1]);

    struct proc_regionwithpathinfo prwpi;
    uint64_t address = 0;
    uint64_t last_ino = 0;
    while (1) {
        int retval = proc_pidinfo(pid, PROC_PIDREGIONPATHINFO, address, &prwpi, sizeof(prwpi));
        if (retval <= 0) {
            break;
        }
        else if (retval < sizeof(prwpi)) {
            perror("proc_pidinfo");
            exit(1);
        }
        char *path = prwpi.prp_vip.vip_path;
        uint64_t ino = prwpi.prp_vip.vip_vi.vi_stat.vst_ino;

        if (path && path[0] && ino != last_ino) {
            printf("path is %s\n", path);
            last_ino = ino;
        }
        address = prwpi.prp_prinfo.pri_address + prwpi.prp_prinfo.pri_size;
    }
    return 0;
}

Upvotes: 1

Nickolay
Nickolay

Reputation: 32073

Upvotes: 1

Related Questions