Skip to content

libdebug.snapshots.thread.lw_thread_snapshot

LightweightThreadSnapshot

Bases: ThreadSnapshot

This object represents a snapshot of the target thread. It has to be initialized by a ProcessSnapshot, since it initializes its properties with shared process state. It holds information about a thread's state.

Snapshot levels: - base: Registers - writable: Registers, writable memory contents - full: Registers, all readable memory contents

Source code in libdebug/snapshots/thread/lw_thread_snapshot.py 
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
class LightweightThreadSnapshot(ThreadSnapshot):
    """This object represents a snapshot of the target thread. It has to be initialized by a ProcessSnapshot, since it initializes its properties with shared process state. It holds information about a thread's state.

    Snapshot levels:
    - base: Registers
    - writable: Registers, writable memory contents
    - full: Registers, all readable memory contents
    """

    def __init__(
        self: LightweightThreadSnapshot,
        thread: ThreadContext,
        process_snapshot: ProcessSnapshot,
    ) -> None:
        """Creates a new snapshot object for the given thread.

        Args:
            thread (ThreadContext): The thread to take a snapshot of.
            process_snapshot (ProcessSnapshot): The process snapshot to which the thread belongs.
        """
        # Set id of the snapshot and increment the counter
        self.snapshot_id = thread._snapshot_count
        thread.notify_snapshot_taken()

        # Basic snapshot info
        self.thread_id = thread.thread_id
        self.tid = thread.tid

        # If there is a name, append the thread id
        if process_snapshot.name is None:
            self.name = None
        else:
            self.name = f"{process_snapshot.name} - Thread {self.tid}"

        # Get thread registers
        self._save_regs(thread)

        self._proc_snapshot = process_snapshot

    @property
    def level(self: LightweightThreadSnapshot) -> str:
        """Returns the snapshot level."""
        return self._proc_snapshot.level

    @property
    def arch(self: LightweightThreadSnapshot) -> str:
        """Returns the architecture of the thread snapshot."""
        return self._proc_snapshot.arch

    @property
    def maps(self: LightweightThreadSnapshot) -> MemoryMapSnapshotList:
        """Returns the memory map snapshot list associated with the process snapshot."""
        return self._proc_snapshot.maps

    @property
    def _memory(self: LightweightThreadSnapshot) -> SnapshotMemoryView:
        """Returns the memory view associated with the process snapshot."""
        return self._proc_snapshot._memory

_memory property

Returns the memory view associated with the process snapshot.

arch property

Returns the architecture of the thread snapshot.

level property

Returns the snapshot level.

maps property

Returns the memory map snapshot list associated with the process snapshot.

__init__(thread, process_snapshot)

Creates a new snapshot object for the given thread.

Parameters:

Name Type Description Default
thread ThreadContext

The thread to take a snapshot of.

 required
process_snapshot ProcessSnapshot

The process snapshot to which the thread belongs.

 required
Source code in libdebug/snapshots/thread/lw_thread_snapshot.py 
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
def __init__(
    self: LightweightThreadSnapshot,
    thread: ThreadContext,
    process_snapshot: ProcessSnapshot,
) -> None:
    """Creates a new snapshot object for the given thread.

    Args:
        thread (ThreadContext): The thread to take a snapshot of.
        process_snapshot (ProcessSnapshot): The process snapshot to which the thread belongs.
    """
    # Set id of the snapshot and increment the counter
    self.snapshot_id = thread._snapshot_count
    thread.notify_snapshot_taken()

    # Basic snapshot info
    self.thread_id = thread.thread_id
    self.tid = thread.tid

    # If there is a name, append the thread id
    if process_snapshot.name is None:
        self.name = None
    else:
        self.name = f"{process_snapshot.name} - Thread {self.tid}"

    # Get thread registers
    self._save_regs(thread)

    self._proc_snapshot = process_snapshot