WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-03 04:48:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

Windows: Fix wrote attribute in cmdline plugin

Browse Source 
Fixes #316.
This commit is contained in:
Mike Auty
2020-08-28 01:43:41 +01:00
parent b41658e71f
commit 5bd0cf0e2e
1 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/windows/cmdline.py
+3 -5
View File
@@ -33,7 +33,7 @@ class CmdLine(interfaces.plugins.PluginInterface):
]
@classmethod
def get_cmdline(cls, context: interfaces.context.ContextInterface,
def get_cmdline(cls, context: interfaces.context.ContextInterface,
kernel_table_name: str, proc):
"""Extracts the cmdline from PEB
@@ -56,7 +56,6 @@ class CmdLine(interfaces.plugins.PluginInterface):
return result_text
def _generator(self, procs):
for proc in procs:
@@ -75,11 +74,10 @@ class CmdLine(interfaces.plugins.PluginInterface):
except exceptions.InvalidAddressException as exp:
result_text = "Process {}: Required memory at {:#x} is not valid (incomplete layer {}?)".format(
proc_id, exp.invalid_address, exp.layer)
proc_id, exp.invalid_address, exp.layer_name)
yield (0, (proc.UniqueProcessId, process_name, result_text))
def run(self):
filter_func = pslist.PsList.create_pid_filter(self.config.get('pid', None))