WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-12 12:47:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Linux: Correct partial renaming attempt

Browse Source
This commit is contained in:
Mike Auty
2025-02-23 15:48:05 +00:00
parent 944c841278
commit 6d254fa961
2 changed files with 5 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/linux/ip.py
+1 -1
View File
@@ -132,7 +132,7 @@ class Link(plugins.PluginInterface):
def _generator(self):
vmlinux = self.context.modules[self.config["kernel"]]
net.NetSymbols.apply(self.context.symbol_space[vmlinux.symbol_table_name])
network.NetSymbols.apply(self.context.symbol_space[vmlinux.symbol_table_name])
net_type_symname = vmlinux.symbol_table_name + constants.BANG + "net"
net_device_symname = vmlinux.symbol_table_name + constants.BANG + "net_device"
volatility3/framework/plugins/linux/sockstat.py
+4 -6
View File
@@ -39,7 +39,7 @@ class SockHandlers(interfaces.configuration.VersionableInterface):
f"Version mismatch of volatility library NetSymbols version ({net.NetSymbols.version}) and needed version ({self._net_version_required})"
)
net.NetSymbols.apply(self._symbol_table)
network.NetSymbols.apply(self._symbol_table)
try:
netns_id = task.nsproxy.net_ns.get_inode()
@@ -73,16 +73,14 @@ class SockHandlers(interfaces.configuration.VersionableInterface):
netdevices_map = {}
nethead = self._vmlinux.object_from_symbol(symbol_name="net_namespace_list")
net_symname = self._vmlinux.symbol_table_name + constants.BANG + "net"
for network in nethead.to_list(net_symname, "list"):
for net in nethead.to_list(net_symname, "list"):
net_device_symname = (
self._vmlinux.symbol_table_name + constants.BANG + "net_device"
)
for net_dev in network.dev_base_head.to_list(
net_device_symname, "dev_list"
):
for net_dev in net.dev_base_head.to_list(net_device_symname, "dev_list"):
if (
isinstance(netns_id, NotAvailableValue)
or network.get_inode() != netns_id
or net.get_inode() != netns_id
):
continue
dev_name = utility.array_to_string(net_dev.name)