mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-06 09:47:38 +02:00
Merge pull request #1531 from j-t-1/conversion
Use in-place subtraction
This commit is contained in:
@@ -18,7 +18,7 @@ def wintime_to_datetime(
|
||||
unix_time = wintime // 10000000
|
||||
if unix_time == 0:
|
||||
return renderers.NotApplicableValue()
|
||||
unix_time = unix_time - 11644473600
|
||||
unix_time -= 11644473600
|
||||
try:
|
||||
return datetime.datetime.fromtimestamp(unix_time, datetime.timezone.utc)
|
||||
# Windows sometimes throws OSErrors rather than ValueError/OverflowError when it can't convert a value
|
||||
@@ -71,7 +71,7 @@ def round(addr: int, align: int, up: bool = False) -> int:
|
||||
Args:
|
||||
addr: the address
|
||||
align: the alignment value
|
||||
up: Whether to round up or not
|
||||
up: whether to round up or not
|
||||
|
||||
Returns:
|
||||
The aligned address
|
||||
@@ -122,11 +122,12 @@ def convert_port(port_as_integer):
|
||||
|
||||
|
||||
def convert_network_four_tuple(family, four_tuple):
|
||||
"""Converts the connection four_tuple: (source ip, source port, dest ip,
|
||||
dest port)
|
||||
"""Converts the connection four_tuple:
|
||||
|
||||
(source ip, source port, dest ip, dest port)
|
||||
|
||||
into their string equivalents. IP addresses are expected as a tuple
|
||||
of unsigned shorts Ports are converted to proper endianness as well
|
||||
of unsigned shorts. Ports are converted to proper endianness as well.
|
||||
"""
|
||||
|
||||
if family == socket.AF_INET:
|
||||
|
||||
Reference in New Issue
Block a user