WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-22 14:32:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

Plugins: Since procs have been instantiated, checks aren't needed

Browse Source
This commit is contained in:
Mike Auty
2020-07-18 16:38:49 +01:00
committed by ikelos
parent d15b23aa19
commit 73ad2bcd4e
1 changed files with 2 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/mac/pslist.py
+2 -6
View File
@@ -109,8 +109,6 @@ class PsList(interfaces.plugins.PluginInterface):
kernel = contexts.Module(context, darwin_symbols, layer_name, 0)
kernel_layer = context.layers[layer_name]
proc = kernel.object_from_symbol(symbol_name = "allproc").lh_first
seen = {} # type: Dict[int, int]
@@ -121,7 +119,7 @@ class PsList(interfaces.plugins.PluginInterface):
else:
seen[proc.vol.offset] = 1
if not filter_func(proc) and kernel_layer.is_valid(proc.vol.offset, proc.vol.size):
if not filter_func(proc):
yield proc
try:
@@ -150,8 +148,6 @@ class PsList(interfaces.plugins.PluginInterface):
kernel = contexts.Module(context, darwin_symbols, layer_name, 0)
kernel_layer = context.layers[layer_name]
queue_entry = kernel.object_from_symbol(symbol_name = "tasks")
seen = {} # type: Dict[int, int]
@@ -167,7 +163,7 @@ class PsList(interfaces.plugins.PluginInterface):
except exceptions.PagedInvalidAddressException:
continue
if kernel_layer.is_valid(proc.vol.offset, proc.vol.size) and not filter_func(proc):
if not filter_func(proc):
yield proc
@classmethod