mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-08-24 07:02:23 +02:00
Fix up linuxutils to use symbol_tables rather than hard coded values
This commit is contained in:
@@ -30,12 +30,18 @@ class Lsof(plugins.PluginInterface):
|
||||
]
|
||||
|
||||
def _generator(self, tasks):
|
||||
symbol_table = None
|
||||
for task in tasks:
|
||||
if symbol_table is None:
|
||||
if constants.BANG not in task.vol.type_name:
|
||||
raise ValueError("Task is not part of a symbol table")
|
||||
symbol_table = task.vol.type_name.split(constants.BANG)[0]
|
||||
|
||||
name = utility.array_to_string(task.comm)
|
||||
pid = int(task.pid)
|
||||
|
||||
for fd_num, _, full_path in linux.LinuxUtilities.files_descriptors_for_process(
|
||||
self.config, self.context, task):
|
||||
self.context, symbol_table, task):
|
||||
yield (0, (pid, name, fd_num, full_path))
|
||||
|
||||
def run(self):
|
||||
|
||||
Reference in New Issue
Block a user