From 8f8e04da97816a2f3236fdbd7782ad7f0c5b6020 Mon Sep 17 00:00:00 2001 From: Gustavo Moreira Date: Tue, 21 Dec 2021 15:52:22 +1100 Subject: [PATCH] vfs_inode is not being used nor required --- volatility3/framework/plugins/linux/sockstat.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/volatility3/framework/plugins/linux/sockstat.py b/volatility3/framework/plugins/linux/sockstat.py index a73d5581a..f526d614e 100644 --- a/volatility3/framework/plugins/linux/sockstat.py +++ b/volatility3/framework/plugins/linux/sockstat.py @@ -416,8 +416,7 @@ class Sockstat(plugins.PluginInterface): socket_alloc = linux.LinuxUtilities.container_of(d_inode, "socket_alloc", "vfs_inode", vmlinux) socket = socket_alloc.socket - vfs_inode = socket_alloc.vfs_inode - if not (socket and vfs_inode): + if not (socket and socket.sk): continue sock = socket.sk.dereference()