WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-07 18:27:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

linux: bpf_prog extension object: improve pointers validation

Browse Source
This commit is contained in:
Gustavo Moreira
2025-01-17 09:52:54 +11:00
parent 50c690e280
commit 5dc4dfcee8
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/symbols/linux/extensions/__init__.py
+4 -1
View File
@@ -2023,8 +2023,11 @@ class bpf_prog(objects.StructType):
prog_tag_addr = self.tag.vol.offset
prog_tag_size = self.tag.count
prog_tag_bytes = vmlinux_layer.read(prog_tag_addr, prog_tag_size)
if not vmlinux_layer.is_valid(prog_tag_addr, prog_tag_size):
vollog.debug("Unable to read bpf tag string from 0x%x", prog_tag_addr)
return None
prog_tag_bytes = vmlinux_layer.read(prog_tag_addr, prog_tag_size)
prog_tag = binascii.hexlify(prog_tag_bytes).decode()
return prog_tag