Merge pull request #1668 from volatilityfoundation/fix_keyboard_notifiers

Gracefully terminate the plugin when the keyboard notifier list head …
This commit is contained in:
ikelos
2025-03-05 23:40:47 +00:00
committed by GitHub
@@ -61,6 +61,10 @@ class Keyboard_notifiers(interfaces.plugins.PluginInterface):
"This means you are either analyzing an unsupported kernel version or that your symbol table is corrupt."
)
if not self.context.layers[vmlinux.layer_name].is_valid(knl_addr.vol.offset):
vollog.error("The head of the keyboard notifier list is paged out.")
return
knl = vmlinux.object(
object_type="atomic_notifier_head",
offset=knl_addr.vol.offset,