WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-23 18:14:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

linux: VMCoreInfo API: AARCH64 uses NUMBER() with hex values. Fortunately, includes the 0x prefix, allowing the parser to still handle these cases correctly

Browse Source
This commit is contained in:
Gustavo Moreira
2024-11-18 18:18:14 +11:00
parent d80ef55325
commit 13729ac25f
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/symbols/linux/__init__.py
+2 -2
View File
@@ -869,9 +869,9 @@ class VMCoreInfo(interfaces.configuration.VersionableInterface):
if key.startswith("SYMBOL(") or key == "KERNELOFFSET":
return int(value, 16)
elif key.startswith(("NUMBER(", "LENGTH(", "SIZE(", "OFFSET(")):
return int(value)
return int(value, 0)
elif key == "PAGESIZE":
return int(value)
return int(value, 0)
# Default, as string
return value