WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-17 20:35:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

ordering fix

Browse Source
This commit is contained in:
Andrew Case
2025-03-27 17:17:08 -05:00
parent ed7e013aac
commit 5cfd55eba8
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/symbols/linux/utilities/module_extract.py
+5 -2
View File
@@ -240,8 +240,11 @@ class ModuleExtract(interfaces.configuration.VersionableInterface):
st_other = struct.pack("B", sym.st_other)
st_size = struct.pack(st_fmt, sym.st_size)
# The order as in the ELF specification
sym_data = st_name + st_info + st_other + st_shndx + st_value + st_size
# The order as in the ELF specification. The order is not the same between 32 and 64 bit symbols
if st_fmt == "<I":
sym_data = st_name + st_value + st_size + st_info + st_other + st_shndx
else:
sym_data = st_name + st_info + st_other + st_shndx + st_value + st_size
# This should never happen regardless of smear or other issues in the data. We build the structure to spec.
if len(sym_data) != sym_type.size: