wangxx1809/MemoryCheck
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修改

Browse Source
This commit is contained in:
wangxx1809 2025-08-21 08:53:34 +08:00
parent b0065a876c
commit dcec7afdca
4 changed files with 12 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
resource/log.conf
View File

@ -1,12 +1,12 @@
* GLOBAL: * GLOBAL:
FORMAT = "%datetime %level [%fbase|%line] %msg" FORMAT = "%datetime %level [%fbase|%line] %msg"
FILENAME = "logs\\%datetime{%Y%M%d}.log" FILENAME = "logs\\MemoryCheck.log"
ENABLED = true ENABLED = true
TO_FILE = true ## Notice this TO_FILE = true ## Notice this
TO_STANDARD_OUTPUT = false ## Notice this TO_STANDARD_OUTPUT = false ## Notice this
SUBSECOND_PRECISION = 3 SUBSECOND_PRECISION = 3
PERFORMANCE_TRACKING = false PERFORMANCE_TRACKING = false
MAX_LOG_FILE_SIZE = 2097152 ## Throw log files away after 2MB MAX_LOG_FILE_SIZE = 20971520 ## Throw log files away after 20MB
* DEBUG: * DEBUG:
ENABLED = true ENABLED = true
@ -15,4 +15,6 @@
* INFO: * INFO:
ENABLED = true ENABLED = true
* ERROR: * ERROR:
ENABLED = true
* WARNING:
ENABLED = true ENABLED = true

6
src/Config.h
View File

@ -39,7 +39,11 @@ public :
bool InWhitelists(string& processName) { bool InWhitelists(string& processName) {
bool isFind = false; bool isFind = false;
for (auto it : m_Whitelists) { for (auto it : m_Whitelists) {
if (processName == it) { string exeName = it;
if (exeName.find(".exe") == string::npos) {
exeName += ".exe";
}
if (processName == exeName) {
isFind = true; isFind = true;
break; break;
} }

14
src/MemoryCheck.cpp
View File

@ -61,6 +61,7 @@ void MemoryCheck::Init()
m_Config = new Config(); m_Config = new Config();
m_Config->Init(); m_Config->Init();
LOG(TRACE) << "init finish...";
} }
void MemoryCheck::Start() void MemoryCheck::Start()
@ -127,7 +128,7 @@ NTSTATUS MemoryCheck::HbEnumProcesses(PVOID* Processes)
std::vector<MemoryCheckLog> MemoryCheck::GetTopProcesses(int topN) { std::vector<MemoryCheckLog> MemoryCheck::GetTopProcesses(int topN) {
std::vector<MemoryCheckLog> processes; std::vector<MemoryCheckLog> processes;
string pslistPath = GetAppPath() + "pslist.exe"; string pslistPath = StringHelper::GetAppPath() + "pslist.exe";
HANDLE hReadPipe, hWritePipe; HANDLE hReadPipe, hWritePipe;
SECURITY_ATTRIBUTES sa = { sizeof(SECURITY_ATTRIBUTES), NULL, TRUE }; SECURITY_ATTRIBUTES sa = { sizeof(SECURITY_ATTRIBUTES), NULL, TRUE };
if (!CreatePipe(&hReadPipe, &hWritePipe, &sa, 0)) { if (!CreatePipe(&hReadPipe, &hWritePipe, &sa, 0)) {
@ -330,7 +331,7 @@ void MemoryCheck::CheckAndAlert() {
if (needClose) { if (needClose) {
LOG(INFO) << u8"尝试关闭" << log.m_ProcessName.c_str(); LOG(INFO) << u8"尝试关闭" << log.m_ProcessName.c_str();
string pskillPath = GetAppPath() + "pskill.exe"; string pskillPath = StringHelper::GetAppPath() + "pskill.exe";
char cmd[512]; char cmd[512];
sprintf_s(cmd, sizeof(cmd), "%s /accepteula %s", pskillPath.c_str(), log.m_ProcessName.c_str()); sprintf_s(cmd, sizeof(cmd), "%s /accepteula %s", pskillPath.c_str(), log.m_ProcessName.c_str());
HANDLE hReadPipe, hWritePipe; HANDLE hReadPipe, hWritePipe;
@ -598,12 +599,3 @@ BOOLEAN MemoryCheck::PhIsExecutingInWow64(VOID)
return FALSE; return FALSE;
#endif #endif
} }
string MemoryCheck::GetAppPath() {
char szFilePath[MAX_PATH + 1] = { 0 };
GetModuleFileName(NULL, szFilePath, MAX_PATH);
(strrchr(szFilePath, '\\'))[1] = 0;
return string(szFilePath);
}

2
src/MemoryCheck.h
View File

@ -703,8 +703,6 @@ public:
MemoryCheck(const MemoryCheck&) = delete; MemoryCheck(const MemoryCheck&) = delete;
MemoryCheck& operator=(const MemoryCheck&) = delete; MemoryCheck& operator=(const MemoryCheck&) = delete;
string GetAppPath();
private: private:
MemoryCheck() :m_WindowsVersion(0xffffffffUL), m_UseSysApi(false), m_EnableProcessExtension(false), m_Config(nullptr){ MemoryCheck() :m_WindowsVersion(0xffffffffUL), m_UseSysApi(false), m_EnableProcessExtension(false), m_Config(nullptr){