WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-08 10:47:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Modify linux plugins to support both mmap and mm_mt

Browse Source
This commit is contained in:
Eve
2023-03-24 15:10:34 +00:00
parent 3d51b4a41a
commit 5207cfcb93
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/linux/elfs.py
+1 -1
View File
@@ -48,7 +48,7 @@ class Elfs(plugins.PluginInterface):
name = utility.array_to_string(task.comm)
for vma in task.mm.get_mmap_iter():
for vma in task.mm.get_vma_iter():
hdr = proc_layer.read(vma.vm_start, 4, pad=True)
if not (
hdr[0] == 0x7F
volatility3/framework/plugins/linux/malfind.py
+1 -1
View File
@@ -46,7 +46,7 @@ class Malfind(interfaces.plugins.PluginInterface):
proc_layer = self.context.layers[proc_layer_name]
for vma in task.mm.get_mmap_iter():
for vma in task.mm.get_vma_iter():
if vma.is_suspicious() and vma.get_name(self.context, task) != "[vdso]":
data = proc_layer.read(vma.vm_start, 64, pad=True)
yield vma, data
volatility3/framework/plugins/linux/proc.py
+1 -1
View File
@@ -44,7 +44,7 @@ class Maps(plugins.PluginInterface):
name = utility.array_to_string(task.comm)
for vma in task.mm.get_mmap_iter():
for vma in task.mm.get_vma_iter():
flags = vma.get_protection()
page_offset = vma.get_page_offset()
major = 0