WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-31 04:09:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1729 from the-rectifier/volshell_byteorder

Browse Source 
Volshell: Add byteorder argument for display_* functions
This commit is contained in:
ikelos
2025-03-25 00:10:19 +00:00
committed by GitHub
parent 0ddec14cf9 bb39081e33
commit 6dc0157841
1 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/cli/volshell/generic.py
+8 -6
View File
@@ -310,23 +310,25 @@ class Volshell(interfaces.plugins.PluginInterface):
self._display_data(offset, remaining_data)
def display_quadwords(
self, offset, count=DEFAULT_NUM_DISPLAY_BYTES, layer_name=None
self, offset, count=DEFAULT_NUM_DISPLAY_BYTES, layer_name=None, byteorder="@"
):
"""Displays quad-word values (8 bytes) and corresponding ASCII characters"""
remaining_data = self._read_data(offset, count=count, layer_name=layer_name)
self._display_data(offset, remaining_data, format_string="Q")
self._display_data(offset, remaining_data, format_string=f"{byteorder}Q")
def display_doublewords(
self, offset, count=DEFAULT_NUM_DISPLAY_BYTES, layer_name=None
self, offset, count=DEFAULT_NUM_DISPLAY_BYTES, layer_name=None, byteorder="@"
):
"""Displays double-word values (4 bytes) and corresponding ASCII characters"""
remaining_data = self._read_data(offset, count=count, layer_name=layer_name)
self._display_data(offset, remaining_data, format_string="I")
self._display_data(offset, remaining_data, format_string=f"{byteorder}I")
def display_words(self, offset, count=DEFAULT_NUM_DISPLAY_BYTES, layer_name=None):
def display_words(
self, offset, count=DEFAULT_NUM_DISPLAY_BYTES, layer_name=None, byteorder="@"
):
"""Displays word values (2 bytes) and corresponding ASCII characters"""
remaining_data = self._read_data(offset, count=count, layer_name=layer_name)
self._display_data(offset, remaining_data, format_string="H")
self._display_data(offset, remaining_data, format_string=f"{byteorder}H")
def regex_scan(self, pattern, count=DEFAULT_NUM_DISPLAY_BYTES, layer_name=None):
"""Scans for regex pattern in layer using RegExScanner."""