WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-12 12:47:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #835 from paulkermann/improv/vadinfo_containing_address

Browse Source 
Added new containing address flag to vadinfo plugin
This commit is contained in:
ikelos
2023-01-12 19:05:20 +00:00
committed by GitHub
parent a1eeecf6de adbc33ceed
commit 3cf47b9260
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/windows/vadinfo.py
+2 -3
View File
@@ -54,8 +54,7 @@ class VadInfo(interfaces.plugins.PluginInterface):
requirements.IntRequirement(
name="address",
description="Process virtual memory address to include "
"(all other address ranges are excluded). This must be "
"a base address, not an address within the desired range.",
"(all other address ranges are excluded).",
optional=True,
),
requirements.ListRequirement(
@@ -207,7 +206,7 @@ class VadInfo(interfaces.plugins.PluginInterface):
if self.config.get("address", None) is not None:
def filter_function(x: interfaces.objects.ObjectInterface) -> bool:
return x.get_start() not in [self.config["address"]]
return not (x.get_start() <= self.config['address'] <= x.get_end())
filter_func = filter_function