WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-28 04:24:53 +02:00
Code Issues Packages Projects Releases Wiki Activity

restrict output to PNG, unify file handling

Browse Source
This commit is contained in:
Abyss Watcher
2024-12-22 14:15:45 +01:00
parent 7caf8c572a
commit 1fef570022
1 changed files with 13 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/linux/graphics/fbdev.py
+13 -15
View File
@@ -160,15 +160,13 @@ class Fbdev(interfaces.plugins.PluginInterface):
kernel_name: str,
open_method: Type[interfaces.plugins.FileHandlerInterface],
fb: Framebuffer,
convert_to_image: bool,
image_format: str = "PNG",
convert_to_png_image: bool,
) -> str:
"""Dump a Framebuffer raw buffer to disk.
"""Dump a Framebuffer buffer to disk.
Args:
fb: the relevant Framebuffer object
convert_to_image: a boolean specifying if the buffer should be converted to an image
image_format: the target PIL image format (defaults to PNG)
Returns:
The filename of the dumped buffer.
@@ -176,19 +174,19 @@ class Fbdev(interfaces.plugins.PluginInterface):
kernel = context.modules[kernel_name]
kernel_layer = context.layers[kernel.layer_name]
base_filename = f"{fb.id}_{fb.xres_virtual}x{fb.yres_virtual}_{fb.bpp}bpp"
if convert_to_image:
image = cls.convert_fb_raw_buffer_to_image(context, kernel_name, fb)
output = io.BytesIO()
image.save(output, image_format)
file_handle = open_method(f"{base_filename}.{image_format.lower()}")
file_handle.write(output.getvalue())
if convert_to_png_image:
image_object = cls.convert_fb_raw_buffer_to_image(context, kernel_name, fb)
raw_io_output = io.BytesIO()
image_object.save(raw_io_output, "PNG")
final_fb_buffer = raw_io_output.getvalue()
filename = f"{base_filename}.png"
else:
raw_pixels = kernel_layer.read(fb.fb_info.screen_base, fb.size)
file_handle = open_method(f"{base_filename}.raw")
file_handle.write(raw_pixels)
final_fb_buffer = kernel_layer.read(fb.fb_info.screen_base, fb.size)
filename = f"{base_filename}.raw"
file_handle.close()
return file_handle.preferred_filename
with open_method(filename) as f:
f.write(final_fb_buffer)
return f.preferred_filename
@classmethod
def parse_fb_info(