WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-17 20:35:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Code Review: Get rid of 'kvo' in favor of kernel.offset

Browse Source
This commit is contained in:
David McDonald
2025-03-05 17:59:49 -06:00
parent a192546eb0
commit 76cceb93cb
2 changed files with 2 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/windows/modules.py
+1 -5
View File
@@ -322,11 +322,7 @@ class Modules(interfaces.plugins.PluginInterface):
"""
kernel = context.modules[kernel_module_name]
kvo = context.layers[kernel.layer_name].config.get(
"kernel_virtual_offset", None
)
if not kvo:
if not kernel.offset:
raise ValueError(
"Intel layer does not have an associated kernel virtual offset, failing"
)
volatility3/framework/plugins/windows/pslist.py
+1 -5
View File
@@ -228,11 +228,7 @@ class PsList(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
kernel = context.modules[kernel_module_name]
# We only use the object factory to demonstrate how to use one
kvo = context.layers[kernel.layer_name].config.get(
"kernel_virtual_offset", None
)
if not kvo:
if not kernel.offset:
raise ValueError(
"Intel layer does not have an associated kernel virtual offset, failing"
)