mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-13 21:27:39 +02:00
Merge pull request #1428 from gcmoreira/linux_fix_parent_tgid
Linux: task.get_parent_pid() fix to mimic getppid() syscall
This commit is contained in:
@@ -641,7 +641,7 @@ class task_struct(generic.GenericIntelProcess):
|
||||
"""
|
||||
|
||||
if self.real_parent and self.real_parent.is_readable():
|
||||
ppid = self.real_parent.pid
|
||||
ppid = self.real_parent.tgid
|
||||
else:
|
||||
ppid = 0
|
||||
|
||||
|
||||
Reference in New Issue
Block a user