mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-09-25 11:04:52 +02:00
Merge pull request #1412 from gcmoreira/linux_task_parent_pid_fix
Linux: Fix task parent pid in several plugins
This commit is contained in:
@@ -27,8 +27,8 @@ class DescExitStateEnum(Enum):
|
||||
class PsScan(interfaces.plugins.PluginInterface):
|
||||
"""Scans for processes present in a particular linux image."""
|
||||
|
||||
_required_framework_version = (2, 0, 0)
|
||||
_version = (1, 0, 1)
|
||||
_required_framework_version = (2, 13, 0)
|
||||
_version = (1, 1, 0)
|
||||
|
||||
@classmethod
|
||||
def get_requirements(cls) -> List[interfaces.configuration.RequirementInterface]:
|
||||
@@ -52,10 +52,7 @@ class PsScan(interfaces.plugins.PluginInterface):
|
||||
"""
|
||||
pid = task.tgid
|
||||
tid = task.pid
|
||||
ppid = 0
|
||||
|
||||
if task.parent.is_readable():
|
||||
ppid = task.parent.tgid
|
||||
ppid = task.get_parent_pid()
|
||||
name = utility.array_to_string(task.comm)
|
||||
exit_state = DescExitStateEnum(task.exit_state).name
|
||||
|
||||
|
||||
Reference in New Issue
Block a user