WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-10 03:37:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Convert pdbscanner to a generator.

Browse Source
This commit is contained in:
Mike Auty
2017-07-20 17:47:21 +01:00
parent b8fe2a96be
commit 0b6e50daba
1 changed files with 5 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/automagic/pdbscan.py
+5 -8
View File
@@ -71,7 +71,6 @@ def scan(ctx, layer_name, page_size, progress_callback = None, start = None, end
The UI should always provide the user an opportunity to specify the
appropriate types and PDB values themselves
"""
results = []
min_pfn = 0
pdb_names = [
b"ntkrnlmp.pdb",
@@ -97,13 +96,11 @@ def scan(ctx, layer_name, page_size, progress_callback = None, start = None, end
break
min_pfn = sig_pfn
results.append({'GUID': GUID,
'age': age,
'pdb_name': str(pdb_name, "utf-8"),
'signature_offset': signature_offset,
'mz_offset': mz_offset})
return results
yield {'GUID': GUID,
'age': age,
'pdb_name': str(pdb_name, "utf-8"),
'signature_offset': signature_offset,
'mz_offset': mz_offset}
class KernelPDBScanner(interfaces.automagic.AutomagicInterface):