mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-08-24 15:12:23 +02:00
Restore the mac queue_event class override.
For some reason, this went missing in commit
a3caf39097, which looks to have been an
error.
This commit is contained in:
@@ -79,6 +79,7 @@ class proc(generic.GenericIntelProcess):
|
||||
|
||||
yield (start, end - start)
|
||||
|
||||
|
||||
class fileglob(objects.StructType):
|
||||
|
||||
def get_fg_type(self):
|
||||
@@ -360,3 +361,16 @@ class inpcb(objects.StructType):
|
||||
rport = self.inp_fport
|
||||
|
||||
return [lip, lport, rip, rport]
|
||||
|
||||
|
||||
class queue_entry(objects.StructType):
|
||||
|
||||
def walk_list(self, list_head, member_name, type_name):
|
||||
n = self.next.dereference().cast(type_name)
|
||||
while n is not None and n.vol.offset != list_head:
|
||||
yield n
|
||||
n = n.member(attr = member_name).next.dereference().cast(type_name)
|
||||
p = self.prev.dereference().cast(type_name)
|
||||
while p is not None and p.vol.offset != list_head:
|
||||
yield p
|
||||
p = p.member(attr = member_name).prev.dereference().cast(type_name)
|
||||
|
||||
Reference in New Issue
Block a user