Pointers
An array of VMKRHY structures are embedded in VMKRH at krh_akrhy.
An array of VMKRHS structures are embedded in VMKRH at krh_akrhs.
ksh_hdrEntry in VMKSH points to the first chained VMKSHD.
kshd_pbNext in VMKSHD points to subsequent VMKSHD structures. VMKRHF structures from the dummy VMKRHF embedded in VMKRK at krh_krhfDummy
VMKSHD structure are allocated from the Kernel Resident Heap.
VMKSH prefixes a swappable heap.
Allocated blocks (VMKSHB) are sparsely allocated from the heap.
VMKSHB prefixes the data portion of an allocated block.
VMKSH and VMKSHB:
vmkshrw (0xffef).
VMKSH Kernel Swappable Heap Header (RETAIL kernel)
旼컴컴컴컴컴컴컴컫컴컴컴쩡컴컴컫컴컴쩡컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴커�Field Name �Offset�Length�Type�Description � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_hdrEntry �+0 �12 쿞 쿏ummy head descriptor of free chain � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 � �+0 �4 쿏 � � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 � �+4 �4 쿏 쿾ointer to next descriptor � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 � �+8 �4 쿏 � � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_pHint �+c �4 쿏 쿏escriptor pointer to last block touched� 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_pHPrev �+10 �4 쿏 쿏escriptor pointer to PrevBlk of last � � � � � 퀃ouched � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_HintSize �+14 �4 쿏 쿞ize of last block touched � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_pbEndRes �+18 �4 쿏 쿢pper bound of reserved virt mem � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_pbEndCom �+1c �4 쿏 쿢pper bound of committed virt mem � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_fl �+20 �4 쿏 쿞wappable heap allocation flags � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_hob �+24 �2 쿥 쿓eap object handle � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_pbStart �+26 �4 쿏 쿗ower bound of reserved virt mem � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_ksem �+2a 쿎 쿞 쿖SEM for swappable heap � 읕컴컴컴컴컴컴컴컨컴컴컴좔컴컴컨컴컴좔컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴켸
VMKSH Kernel Swappable Heap Header (ALLSTRICT kernel)
旼컴컴컴컴컴컴컴컫컴컴컴쩡컴컴컫컴컴쩡컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴커 �Field Name �Offset�Length�Type�Description � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_hdrEntry �+0 �4 쿏 쿓ead of descriptor chain � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_pHint �+4 �4 쿏 쿏escriptor pointer to last block touched� 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_pHPrev �+8 �4 쿏 쿏escriptor pointer to PrevBlk of last � � � � � 퀃ouched � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_HintSize �+C �4 쿏 쿞ize of last block touched � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_pbEndRes �+10 �4 쿏 쿢pper bound of reserved virt mem � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_pbEndCom �+14 �4 쿏 쿢pper bound of committed virt mem � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_fl �+18 �4 쿏 쿞wappable heap allocation flags � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_hob �+1C �2 쿥 쿓eap object handle � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_pbStart �+1E �4 쿏 쿗ower bound of reserved virt mem � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_ksem �+22 �10 쿞 쿖SEM for swappable heap � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_ckshds �+32 �4 쿏 쿎ount of heap modifications � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_cFrees �+36 �4 쿏 쿎ount of heap modifications � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸sh_cAllocs �+3a �4 쿏 쿎ount of heap modifications � 읕컴컴컴컴컴컴컴컨컴컴컴좔컴컴컨컴컴좔컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴켸
VMKSHD Kernel Swappable Heap Descriptor Record for Free Blocks.
旼컴컴컴컴컴컴컴컫컴컴컴쩡컴컴컫컴컴쩡컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴커 �Field Name �Offset�Length�Type�Description � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸shb_size �+0 �4 쿏 쿞ize of block in dwords � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸shd_pNext �+4 �4 쿏 쿙ext free block � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸shd_pb �+8 �4 쿏 쿌ddress of block header � 읕컴컴컴컴컴컴컴컨컴컴컴좔컴컴컨컴컴좔컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴켸
VMKSHB Kernel Swappable Heap Block Header for Allocated blocks.
旼컴컴컴컴컴컴컴컫컴컴컴쩡컴컴컫컴컴쩡컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴커 �Field Name �Offset�Length�Type�Description � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 � �+0 �1 쿏 쿞ignature 0x52 � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸shb_size � �3 � 퀂ize of block � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸shb_hobowner �+4 �2 쿥 쿚wner � 쳐컴컴컴컴컴컴컴컵컴컴컴탠컴컴컵컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴캑 쿸shb_sel �+6 �2 쿥 쿞elector � 읕컴컴컴컴컴컴컴컨컴컴컴좔컴컴컨컴컴좔컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴켸
ksh_fl flag definitions.
旼컴컴컴컴컴컴컫컴컴컴컴컴쩡컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿙ame 쿍it Mask 쿏escription � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_CONTIG �0x00000001쿬ontiguous physical memory � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_NOINCR �0x00000001쿭on't increment physical addrs � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_W �0x00000002쿥ritable - value from pte � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_U �0x00000004퀅ser mode accessible - from pte � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_X �0x00000008쿮Xecutable � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_R �0x00000010쿝eadable � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_1M �0x00000020쿺ust reside below 1 meg physical � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_GUARD �0x00000040쿲uard page - from pte � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_16M �0x00000040쿺ust reside below 16 meg physical� 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_ZEROFILL �0x00000080퀊ero initialize pages � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_SWAPONWRITE�0x00000100퀆alue from vp � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_UVIRT �0x00000200퀆alue from pte � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_RESIDENT �0x00000400퀆alue from pte � 쳐컴컴컴컴컴컴컵컴컴컴컴컴탠컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 쿛G_DISCARDABLE�0x00000800퀆alue from vp � 읕컴컴컴컴컴컴컨컴컴컴컴컴좔컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴�