From f9102a60b801c26899e966c6a65d34e18d47ba05 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Thu, 10 Dec 2020 22:42:16 +0000 Subject: [PATCH 1/4] Release: Update the version number for this release Entering code-freeze 10th Dec - Bug fixes and documentation, no new features 7th Jan - Only critical fixes 21st Jan - Release date --- volatility/framework/constants/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility/framework/constants/__init__.py b/volatility/framework/constants/__init__.py index b39fc2b7a..cc1cf3eec 100644 --- a/volatility/framework/constants/__init__.py +++ b/volatility/framework/constants/__init__.py @@ -41,7 +41,7 @@ BANG = "!" VERSION_MAJOR = 2 # Number of releases of the library with a breaking change VERSION_MINOR = 0 # Number of changes that only add to the interface VERSION_PATCH = 0 # Number of changes that do not change the interface -VERSION_SUFFIX = "-beta.1" +VERSION_SUFFIX = "" PACKAGE_VERSION = ".".join([str(x) for x in [VERSION_MAJOR, VERSION_MINOR, VERSION_PATCH]]) + VERSION_SUFFIX """The canonical version of the volatility package""" From f262821924dc634f5a04397ca01be895041d2fef Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Mon, 21 Dec 2020 17:07:51 +0000 Subject: [PATCH 2/4] Documentation: minor bugfix --- doc/source/conf.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/source/conf.py b/doc/source/conf.py index 2fa2c1b5b..bef818295 100644 --- a/doc/source/conf.py +++ b/doc/source/conf.py @@ -75,7 +75,7 @@ def setup(app): break else: line_index = len(real_lines) - submodule_lines = real_lines[line_index:] + submodule_lines = [b"\n"] + real_lines[line_index:] plugins_seen = False with open(os.path.join(dir, filename), "wb") as contents: From feefc93adc83a13afa656cb53c2913afe986ea90 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Fri, 11 Dec 2020 16:03:44 +0000 Subject: [PATCH 3/4] CLI: Fix inaccurate documentation --- volatility/cli/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility/cli/__init__.py b/volatility/cli/__init__.py index 04af5b0de..3e680aa26 100644 --- a/volatility/cli/__init__.py +++ b/volatility/cli/__init__.py @@ -107,7 +107,7 @@ class CommandLine: default = None, type = str) parser.add_argument("--parallelism", - help = "Enables parallelism (defaults to processes if no argument given)", + help = "Enables parallelism (defaults to off if no argument given)", nargs = '?', choices = ['processes', 'threads', 'off'], const = 'processes', From 1c2a9921ff9d336368c6d92afd3656c6b4bcbe3e Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Sun, 27 Dec 2020 15:21:06 +0000 Subject: [PATCH 4/4] Windows: Partial fix for #368 error messages --- volatility/framework/plugins/windows/handles.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/volatility/framework/plugins/windows/handles.py b/volatility/framework/plugins/windows/handles.py index 25914842d..d09536868 100644 --- a/volatility/framework/plugins/windows/handles.py +++ b/volatility/framework/plugins/windows/handles.py @@ -87,11 +87,11 @@ class Handles(interfaces.plugins.PluginInterface): # is this the right thing to raise here? if magic is None: - if not has_capstone: + if has_capstone: raise AttributeError("Unable to find the SAR value for decoding handle table pointers") else: raise exceptions.MissingModuleException( - "capstone", "Unable to find the SAR value for decoding handle table pointers") + "capstone", "Requires capstone to find the SAR value for decoding handle table pointers") offset = self._decode_pointer(handle_table_entry.LowValue, magic) # print("LowValue: {0:#x} Magic: {1:#x} Offset: {2:#x}".format(handle_table_entry.InfoTable, magic, offset))