From 81d346438a29ef98eaa2ff02722646d6b580fcc3 Mon Sep 17 00:00:00 2001
From: AsafEitani <asaf.e@sygnia.co>
Date: Mon, 31 Aug 2020 10:45:30 +0300
Subject: [PATCH] Revert "changed config['dump'] to config.get('dump')"

This reverts commit 0d3017f16c991efbe904303204b4653d803685d3.
---
 volatility/framework/plugins/windows/malfind.py           | 2 +-
 volatility/framework/plugins/windows/memmap.py            | 2 +-
 volatility/framework/plugins/windows/modscan.py           | 2 +-
 volatility/framework/plugins/windows/modules.py           | 2 +-
 volatility/framework/plugins/windows/pslist.py            | 2 +-
 volatility/framework/plugins/windows/registry/hivelist.py | 2 +-
 volatility/framework/plugins/windows/vadinfo.py           | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/volatility/framework/plugins/windows/malfind.py b/volatility/framework/plugins/windows/malfind.py
index 515a3020e..d1ccd7242 100644
--- a/volatility/framework/plugins/windows/malfind.py
+++ b/volatility/framework/plugins/windows/malfind.py
@@ -132,7 +132,7 @@ class Malfind(interfaces.plugins.PluginInterface):
                 disasm = interfaces.renderers.Disassembly(data, vad.get_start(), architecture)
 
                 dumped = False
-                if self.config.get('dump'):
+                if self.config['dump']:
                     filedata = vadinfo.VadInfo.vad_dump(self.context, proc, vad)
                     if filedata:
                         try:
diff --git a/volatility/framework/plugins/windows/memmap.py b/volatility/framework/plugins/windows/memmap.py
index 95e5fff0a..5c91538f2 100644
--- a/volatility/framework/plugins/windows/memmap.py
+++ b/volatility/framework/plugins/windows/memmap.py
@@ -52,7 +52,7 @@ class Memmap(interfaces.plugins.PluginInterface):
                 offset, size, mapped_offset, mapped_size, maplayer = mapval
 
                 dumped = False
-                if self.config.get('dump'):
+                if self.config['dump']:
                     try:
                         data = proc_layer.read(offset, size, pad = True)
                         filedata.data.write(data)
diff --git a/volatility/framework/plugins/windows/modscan.py b/volatility/framework/plugins/windows/modscan.py
index 9bfd55d27..c20527b7a 100644
--- a/volatility/framework/plugins/windows/modscan.py
+++ b/volatility/framework/plugins/windows/modscan.py
@@ -75,7 +75,7 @@ class ModScan(interfaces.plugins.PluginInterface):
                 FullDllName = ""
 
             dumped = False
-            if self.config.get('dump'):
+            if self.config['dump']:
                 filedata = dlllist.DllList.dump_pe(self.context, pe_table_name, mod)
                 if filedata:
                     self.produce_file(filedata)
diff --git a/volatility/framework/plugins/windows/modules.py b/volatility/framework/plugins/windows/modules.py
index 830f85044..1165328fc 100644
--- a/volatility/framework/plugins/windows/modules.py
+++ b/volatility/framework/plugins/windows/modules.py
@@ -56,7 +56,7 @@ class Modules(interfaces.plugins.PluginInterface):
                 FullDllName = ""
 
             dumped = False
-            if self.config.get('dump'):
+            if self.config['dump']:
                 filedata = dlllist.DllList.dump_pe(self.context, pe_table_name, mod)
                 if filedata:
                     self.produce_file(filedata)
diff --git a/volatility/framework/plugins/windows/pslist.py b/volatility/framework/plugins/windows/pslist.py
index 71842dbe1..069eab8f7 100644
--- a/volatility/framework/plugins/windows/pslist.py
+++ b/volatility/framework/plugins/windows/pslist.py
@@ -184,7 +184,7 @@ class PsList(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface):
                 (_, _, offset, _, _) = list(memory.mapping(offset = proc.vol.offset, length = 0))[0]
 
             dumped = False
-            if self.config.get('dump'):
+            if self.config['dump']:
                 filedata = self.process_dump(self.context, self.config['nt_symbols'], pe_table_name, proc)
                 if filedata:
                     dumped = True
diff --git a/volatility/framework/plugins/windows/registry/hivelist.py b/volatility/framework/plugins/windows/registry/hivelist.py
index d6935b622..9ec5d43ce 100644
--- a/volatility/framework/plugins/windows/registry/hivelist.py
+++ b/volatility/framework/plugins/windows/registry/hivelist.py
@@ -71,7 +71,7 @@ class HiveList(interfaces.plugins.PluginInterface):
                                                   filter_string = self.config.get('filter', None)):
 
             dumped = False
-            if self.config.get('dump'):
+            if self.config['dump']:
                 # Construct the hive
                 hive = next(self.list_hives(self.context,
                                             self.config_path,
diff --git a/volatility/framework/plugins/windows/vadinfo.py b/volatility/framework/plugins/windows/vadinfo.py
index 84a5c8da7..132401988 100644
--- a/volatility/framework/plugins/windows/vadinfo.py
+++ b/volatility/framework/plugins/windows/vadinfo.py
@@ -163,7 +163,7 @@ class VadInfo(interfaces.plugins.PluginInterface):
             for vad in self.list_vads(proc, filter_func = filter_func):
 
                 dumped = False
-                if self.config.get('dump'):
+                if self.config['dump']:
                     filedata = self.vad_dump(self.context, proc, vad)
                     self.produce_file(filedata)
                     dumped = True