mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-06 09:47:38 +02:00
Fix typos and try setting back requirement change
This commit is contained in:
@@ -638,12 +638,12 @@ class ModuleRequirement(
|
||||
self.add_requirement(
|
||||
TranslationLayerRequirement(name="layer_name", architectures=architectures)
|
||||
)
|
||||
self.add_requirement(SymbolTableRequirement(name="symbol_table_name"))
|
||||
|
||||
@classmethod
|
||||
def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
|
||||
return [
|
||||
IntRequirement(name="offset"),
|
||||
SymbolTableRequirement(name="symbol_table_name"),
|
||||
]
|
||||
|
||||
def unsatisfied(
|
||||
|
||||
@@ -69,7 +69,7 @@ class BigPools(interfaces.plugins.PluginInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
|
||||
|
||||
@@ -364,7 +364,7 @@ class Callbacks(interfaces.plugins.PluginInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
|
||||
@@ -425,7 +425,7 @@ class Callbacks(interfaces.plugins.PluginInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
full_type_name = (
|
||||
@@ -476,7 +476,7 @@ class Callbacks(interfaces.plugins.PluginInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
full_type_name = callback_table_name + constants.BANG + "_CM_CALLBACK_ENTRY"
|
||||
@@ -521,7 +521,7 @@ class Callbacks(interfaces.plugins.PluginInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
|
||||
@@ -581,7 +581,7 @@ class Callbacks(interfaces.plugins.PluginInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
|
||||
@@ -649,7 +649,7 @@ class Callbacks(interfaces.plugins.PluginInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
|
||||
|
||||
@@ -147,7 +147,7 @@ class Handles(interfaces.plugins.PluginInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
|
||||
@@ -209,7 +209,7 @@ class Handles(interfaces.plugins.PluginInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
return context.object(
|
||||
symbol_table + constants.BANG + "unsigned int",
|
||||
|
||||
@@ -250,7 +250,7 @@ class Modules(interfaces.plugins.PluginInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
|
||||
|
||||
@@ -229,7 +229,7 @@ class PsList(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
|
||||
|
||||
@@ -197,7 +197,7 @@ class PsScan(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
tleoffset = ntkrnlmp.get_type("_ETHREAD").relative_child_offset(
|
||||
|
||||
@@ -218,7 +218,7 @@ class HiveList(interfaces.plugins.PluginInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
|
||||
|
||||
@@ -91,7 +91,7 @@ class UnloadedModules(interfaces.plugins.PluginInterface, timeliner.TimeLinerInt
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
unloadedmodules_offset = ntkrnlmp.get_symbol("MmUnloadedDrivers").address
|
||||
|
||||
@@ -102,7 +102,7 @@ class VadInfo(interfaces.plugins.PluginInterface):
|
||||
kvo = context.layers[layer_name].config.get("kernel_virtual_offset", None)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = context.module(symbol_table, layer_name=layer_name, offset=kvo)
|
||||
addr = ntkrnlmp.get_symbol("MmProtectToValue").address
|
||||
|
||||
@@ -843,7 +843,7 @@ class EPROCESS(generic.GenericIntelProcess, pool.ExecutiveObject):
|
||||
)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
|
||||
ntkrnlmp = self._context.module(
|
||||
@@ -1040,7 +1040,7 @@ class TOKEN(objects.StructType):
|
||||
)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
symbol_table = self.get_symbol_table_name()
|
||||
ntkrnlmp = self._context.module(
|
||||
@@ -1148,7 +1148,7 @@ class KTIMER(objects.StructType):
|
||||
)
|
||||
if not kvo:
|
||||
raise ValueError(
|
||||
"Intel layer does not have an associatd kernel virtual offset, failing"
|
||||
"Intel layer does not have an associated kernel virtual offset, failing"
|
||||
)
|
||||
ntkrnlmp = self._context.module(
|
||||
symbol_table_name,
|
||||
|
||||
Reference in New Issue
Block a user