WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-12 12:47:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

manually instantiate queue_entry for tasks symbol

Browse Source
This commit is contained in:
Abyss Watcher
2023-10-08 03:37:17 +02:00
parent 57d995a81d
commit 6e5d41c38b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/mac/pslist.py
+1 -1
View File
@@ -188,7 +188,7 @@ class PsList(interfaces.plugins.PluginInterface):
kernel_layer = context.layers[kernel.layer_name]
queue_entry = kernel.object("queue_entry", kernel.get_symbol("tasks").address)
queue_entry = kernel.object(object_type="queue_entry", offset=kernel.get_symbol("tasks").address)
seen: Dict[int, int] = {}
for task in queue_entry.walk_list(queue_entry, "tasks", "task"):