function::kernel_or_user_string_quoted_utf32 - Linux

Overview

The function::kernel_or_user_string_quoted_utf32 utility returns a quoted string containing the kernel or user string in FUNCTION_ARG3, in UTF-32 encoding.

Syntax

function::kernel_or_user_string_quoted_utf32(
   FUNCTION_ARG1,
   FUNCTION_ARG2,
   FUNCTION_ARG3
)

Options/Flags

– function_arg1: A value of type "addr" addressing the location where the start of string FUNCTION_ARG3 can be found.

– function_arg2: A value of type "enum" identifying if FUNCTION_ARG3 is a user-space string or a kernel string.

– function_arg3: A value of type "string" containing the string to return.

Examples

function::kernel_or_user_string_quoted_utf32($"loc", $"str-arg", $"user-string-arg")

Common Issues

Not Finding the String

If the string is not found at the specified address in FUNCTION_ARG1, an error will be thrown.

Integration

This command can be integrated into scripts or command chains to retrieve quoted strings from kernel or user space in UTF-32 encoding.

Related Commands

• function::kernel_or_user_string_quoted
• function::kernel_or_user_string_raw