WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-12 04:37:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fixes on pydoc, types, exception catching

Browse Source
This commit is contained in:
xabiugarte
2019-12-04 20:02:31 +00:00
committed by ikelos
parent c9520dc37f
commit 3545ab7746
1 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/symbols/windows/extensions/__init__.py
+9 -6
View File
@@ -740,7 +740,10 @@ class EPROCESS(generic.GenericIntelProcess, ExecutiveObject):
if constants.BANG not in self.vol.type_name:
raise ValueError("Invalid symbol table name syntax (no {} found)".format(constants.BANG))
proc_layer_name = self.add_process_layer()
try:
proc_layer_name = self.add_process_layer()
except exceptions.InvalidAddressException:
return
proc_layer = self._context.layers[proc_layer_name]
if not proc_layer.is_valid(self.Peb):
@@ -752,7 +755,7 @@ class EPROCESS(generic.GenericIntelProcess, ExecutiveObject):
offset = self.Peb)
return peb
def load_order_modules(self) -> Iterable[int]:
def load_order_modules(self) -> Iterable[interfaces.objects.ObjectInterface]:
"""Generator for DLLs in the order that they were loaded."""
peb = self.get_peb()
@@ -760,16 +763,16 @@ class EPROCESS(generic.GenericIntelProcess, ExecutiveObject):
"{}{}_LDR_DATA_TABLE_ENTRY".format(self.get_symbol_table().name, constants.BANG), "InLoadOrderLinks"):
yield entry
def init_order_modules(self) -> Iterable[int]:
"""Generator for DLLs in the order that they were loaded."""
def init_order_modules(self) -> Iterable[interfaces.objects.ObjectInterface]:
"""Generator for DLLs in the order that they were initialized"""
peb = self.get_peb()
for entry in peb.Ldr.InInitializationOrderModuleList.to_list(
"{}{}_LDR_DATA_TABLE_ENTRY".format(self.get_symbol_table().name, constants.BANG), "InInitializationOrderLinks"):
yield entry
def mem_order_modules(self) -> Iterable[int]:
"""Generator for DLLs in the order that they were loaded."""
def mem_order_modules(self) -> Iterable[interfaces.objects.ObjectInterface]:
"""Generator for DLLs in the order that they appear in memory"""
peb = self.get_peb()
for entry in peb.Ldr.InMemoryOrderModuleList.to_list(