WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-08 02:37:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

linux: elf: fix imports

Browse Source
This commit is contained in:
Gustavo Moreira
2025-01-30 20:25:22 +11:00
parent e8934e94ce
commit 5d2819a98d
1 changed files with 6 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/symbols/linux/extensions/elf.py
+6 -11
View File
@@ -2,16 +2,11 @@
# which is available at https://www.volatilityfoundation.org/license/vsl-v1.0
#
from typing import Dict, Tuple, Optional
import logging
from typing import Dict, Optional, Tuple
from volatility3.framework import constants
from volatility3.framework.constants.linux import (
ELF_IDENT,
ELF_CLASS,
KSYM_NAME_LEN,
)
from volatility3.framework import objects, interfaces, exceptions
from volatility3.framework import constants, exceptions, interfaces, objects
from volatility3.framework.constants import linux as linux_constants
vollog = logging.getLogger(__name__)
@@ -64,13 +59,13 @@ class elf(objects.StructType):
ei_class = self._context.object(
symbol_table_name + constants.BANG + "unsigned char",
layer_name=layer_name,
offset=object_info.offset + ELF_IDENT.EI_CLASS,
offset=object_info.offset + linux_constants.ELF_IDENT.EI_CLASS,
)
if ei_class == ELF_CLASS.ELFCLASS32:
if ei_class == linux_constants.ELF_CLASS.ELFCLASS32:
self._type_prefix = "Elf32_"
self._ei_class_size = 32
elif ei_class == ELF_CLASS.ELFCLASS64:
elif ei_class == linux_constants.ELF_CLASS.ELFCLASS64:
self._type_prefix = "Elf64_"
self._ei_class_size = 64
else: