WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-24 18:44:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

Convert aslr_mask_symbol_table to more parameterized form.

Browse Source
This commit is contained in:
Mike Auty
2018-12-08 17:55:13 +00:00
parent 378820bf23
commit 918653e398
4 changed files with 42 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/plugins/linux/check_syscall.py
+4 -3
View File
@@ -126,15 +126,16 @@ class Check_syscall(plugins.PluginInterface):
_, aslr_shift = linux.LinuxUtilities.find_aslr(self.context, self.config['vmlinux'], self.config['primary'])
vmlinux = self.context.module(self.config['vmlinux'], self.config['primary'], aslr_shift)
linux.LinuxUtilities.aslr_mask_symbol_table(self.config, self.context, aslr_shift)
linux.LinuxUtilities.aslr_mask_symbol_table(self.context,
self.config['vmlinux'],
self.config['primary'],
aslr_shift)
ptr_sz = vmlinux.get_type("pointer").size
if ptr_sz == 4:
table_name = "32bit"
array_type = "long unsigned int"
else:
table_name = "64bit"
array_type = "long long unsigned int"
try:
table_info = self._get_table_info(vmlinux, "sys_call_table", ptr_sz)