WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-11 04:07:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Allow subtypes for array_of_pointers to be strings.

Browse Source
This commit is contained in:
Mike Auty
2017-10-05 00:30:16 +01:00
parent 06767bd44c
commit 42579ca619
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/objects/utility.py
+6 -1
View File
@@ -1,4 +1,5 @@
from volatility.framework import objects
from volatility.framework.objects import templates
def array_to_string(array, count = None, errors = 'replace'):
@@ -21,7 +22,11 @@ def pointer_to_string(pointer, count, errors = 'replace'):
return char.cast("string", max_length = count, errors = errors)
def array_of_pointers(array, count, subtype = None):
def array_of_pointers(array, count, subtype = None, context = None):
"""Takes an object, and recasts it as an array of pointers to subtype"""
if isinstance(subtype, str) and context is not None:
subtype = context.symbol_space.get_type(subtype)
if not isinstance(subtype, templates.ObjectTemplate) or subtype is None:
raise TypeError("Subtype must be a valid object template")
subtype_pointer = objects.templates.ObjectTemplate(objects.Pointer, type_name = 'pointer', subtype = subtype)
return array.cast("array", count = count, subtype = subtype_pointer)