maat::event::AddrFilter class

Filter addresses to monitor.

Contents

❱   Constructors, destructors, conversion operators

AddrFilter(std::optional<addr_t> addr_min = std::nullopt, std::optional<addr_t> addr_max = std::nullopt)
Create a filter monitoring an address range.

❱   Public functions

auto monitors(addr_t addr) const -> bool
Return true if 'addr' is monitored.
auto monitors(addr_t _min, addr_t _max) const -> bool
Return true if any address between '_min' and '_max' (both included) is monitored.
auto is_active() const -> bool
Return true if the filter monitors at least one address.

❱   Public variables

std::optional<addr_t> addr_min
The lower bound of the address range to monitor (included)
std::optional<addr_t> addr_max
The higher bound of the address range to monitor (included)