WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-09 19:27:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Refactor all references to Context.memory to Context.layers.

Browse Source
This commit is contained in:
Mike Auty
2019-07-07 17:42:51 +01:00
parent ba868c7c27
commit 272224a1b0
55 changed files with 158 additions and 158 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/linux/bash.py
+1 -1
View File
@@ -69,7 +69,7 @@ class Bash(plugins.PluginInterface, timeliner.TimeLinerInterface):
if not proc_layer_name:
continue
proc_layer = self.context.memory[proc_layer_name]
proc_layer = self.context.layers[proc_layer_name]
bang_addrs = []
volatility/framework/plugins/linux/check_syscall.py
+1 -1
View File
@@ -118,7 +118,7 @@ class Check_syscall(plugins.PluginInterface):
# if we can't find the disassemble function then bail and rely on a different method
return 0
data = self.context.memory.read(self.config['primary'], func_addr, 6)
data = self.context.layers.read(self.config['primary'], func_addr, 6)
for (address, size, mnemonic, op_str) in md.disasm_lite(data, func_addr):
if mnemonic == 'CMP':
volatility/framework/plugins/linux/elfs.py
+1 -1
View File
@@ -48,7 +48,7 @@ class Elfs(plugins.PluginInterface):
if not proc_layer_name:
continue
proc_layer = self.context.memory[proc_layer_name]
proc_layer = self.context.layers[proc_layer_name]
name = utility.array_to_string(task.comm)
volatility/framework/plugins/linux/malfind.py
+1 -1
View File
@@ -50,7 +50,7 @@ class Malfind(interfaces_plugins.PluginInterface):
if not proc_layer_name:
return
proc_layer = self.context.memory[proc_layer_name]
proc_layer = self.context.layers[proc_layer_name]
for vma in task.mm.get_mmap_iter():
if vma.is_suspicious() and vma.get_name(self.context, task) != "[vdso]":