WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-11 20:27:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Black fixes

Browse Source
This commit is contained in:
atcuno
2024-07-18 15:01:10 -05:00
parent a7af052509
commit 2a5e94a094
1 changed files with 23 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/windows/svcscan.py
+23 -5
View File
@@ -238,12 +238,17 @@ class SvcScan(interfaces.plugins.PluginInterface):
@classmethod
def enumerate_vista_or_later_header(
cls, context, service_table_name, service_binary_dll_map, proc_layer_name, offset
cls,
context,
service_table_name,
service_binary_dll_map,
proc_layer_name,
offset,
):
if offset % 8:
return
service_header =context.object(
service_header = context.object(
service_table_name + constants.BANG + "_SERVICE_HEADER",
offset=offset,
layer_name=proc_layer_name,
@@ -265,7 +270,14 @@ class SvcScan(interfaces.plugins.PluginInterface):
yield cls.get_record_tuple(service_record, service_info)
@classmethod
def service_scan(cls, context: interfaces.context.ContextInterface, kernel, service_table_name: str, service_binary_dll_map, filter_func):
def service_scan(
cls,
context: interfaces.context.ContextInterface,
kernel,
service_table_name: str,
service_binary_dll_map,
filter_func,
):
relative_tag_offset = context.symbol_space.get_type(
service_table_name + constants.BANG + "_SERVICE_RECORD"
).relative_child_offset("Tag")
@@ -359,10 +371,16 @@ class SvcScan(interfaces.plugins.PluginInterface):
return kernel, service_table_name, service_binary_dll_map, filter_func
def _generator(self):
kernel, service_table_name, service_binary_dll_map, filter_func = self.get_prereq_info()
kernel, service_table_name, service_binary_dll_map, filter_func = (
self.get_prereq_info()
)
for record in self._enumeration_method(
self.context, kernel, service_table_name, service_binary_dll_map, filter_func
self.context,
kernel,
service_table_name,
service_binary_dll_map,
filter_func,
):
yield (0, record)