diff --git a/volatility/framework/automagic/mac.py b/volatility/framework/automagic/mac.py index 43e77b62a..75c8f2cff 100644 --- a/volatility/framework/automagic/mac.py +++ b/volatility/framework/automagic/mac.py @@ -215,8 +215,8 @@ class MacUtilities(object): @classmethod def files_descriptors_for_process(cls, - symbol_table_name : str, context: interfaces.context.ContextInterface, + symbol_table_name : str, task: interfaces.objects.ObjectInterface): """Creates a generator for the file descriptors of a process diff --git a/volatility/framework/plugins/mac/lsof.py b/volatility/framework/plugins/mac/lsof.py index 565773de7..df5659167 100644 --- a/volatility/framework/plugins/mac/lsof.py +++ b/volatility/framework/plugins/mac/lsof.py @@ -30,7 +30,7 @@ class lsof(plugins.PluginInterface): for task in tasks: pid = task.p_pid - for _, filepath, fd in mac.MacUtilities.files_descriptors_for_process(self.config['darwin'], self.context, task): + for _, filepath, fd in mac.MacUtilities.files_descriptors_for_process(self.context, self.config['darwin'], task): if filepath and len(filepath) > 0: yield (0, (pid, fd, filepath)) diff --git a/volatility/framework/plugins/mac/netstat.py b/volatility/framework/plugins/mac/netstat.py index a31dafc74..010bbb099 100644 --- a/volatility/framework/plugins/mac/netstat.py +++ b/volatility/framework/plugins/mac/netstat.py @@ -53,7 +53,7 @@ class Netstat(plugins.PluginInterface): task_name = utility.array_to_string(task.p_comm) pid = task.p_pid - for filp, _, _ in mac.MacUtilities.files_descriptors_for_process(darwin_symbols, context, task): + for filp, _, _ in mac.MacUtilities.files_descriptors_for_process(context, darwin_symbols, task): try: ftype = filp.f_fglob.get_fg_type() except exceptions.InvalidAddressException: