WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-07 02:07:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix plugins for new API

Browse Source
This commit is contained in:
Andrew Case
2018-12-27 22:41:03 +00:00
committed by ikelos
parent 731447000d
commit 984615ebba
5 changed files with 17 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/linux/elfs.py
+1 -1
View File
@@ -57,7 +57,7 @@ class Elfs(plugins.PluginInterface):
if not (hdr[0] == 0x7f and hdr[1] == 0x45 and hdr[2] == 0x4c and hdr[3] == 0x46):
continue
path = vma.get_name(task)
path = vma.get_name(self.context, task)
yield (0, (task.pid, name, format_hints.Hex(vma.vm_start), format_hints.Hex(vma.vm_end), path))
volatility/framework/plugins/linux/malfind.py
+1 -1
View File
@@ -53,7 +53,7 @@ class Malfind(interfaces_plugins.PluginInterface):
proc_layer = self.context.memory[proc_layer_name]
for vma in task.mm.get_mmap_iter():
if vma.is_suspicious() and vma.get_name(task) != "[vdso]":
if vma.is_suspicious() and vma.get_name(self.context, task) != "[vdso]":
data = proc_layer.read(vma.vm_start, 64, pad = True)
yield vma, data
volatility/framework/plugins/linux/proc.py
+1 -1
View File
@@ -63,7 +63,7 @@ class Maps(plugins.PluginInterface):
minor = inode_object.i_sb.minor
inode = inode_object.i_ino
path = vma.get_name(task)
path = vma.get_name(self.context, task)
yield (0, (task.pid, name, format_hints.Hex(vma.vm_start), format_hints.Hex(vma.vm_end), flags,
format_hints.Hex(page_offset), major, minor, inode, path))
volatility/framework/plugins/linux/pslist.py
+8 -3
View File
@@ -21,7 +21,7 @@
from typing import Callable, Iterable, List
import volatility.framework.interfaces.plugins as interfaces_plugins
from volatility.framework import renderers, interfaces
from volatility.framework import renderers, interfaces, contexts
from volatility.framework.automagic import linux
from volatility.framework.configuration import requirements
from volatility.framework.objects import utility
@@ -72,9 +72,14 @@ class PsList(interfaces_plugins.PluginInterface):
vmlinux_symbols: str,
filter: Callable[[int], bool] = lambda _: False) -> Iterable[interfaces.objects.ObjectInterface]:
"""Lists all the tasks in the primary layer"""
linux.LinuxUtilities.aslr_mask_symbol_table(context, vmlinux_symbols, layer_name)
_, aslr_shift = linux.LinuxUtilities.find_aslr(context, vmlinux_symbols, layer_name)
vmlinux = context.module(vmlinux_symbols, layer_name, aslr_shift)
vmlinux = contexts.Module(context,
vmlinux_symbols,
layer_name,
0,
absolute_symbol_addresses = True)
init_task = vmlinux.object(symbol_name = "init_task")
for task in init_task.tasks: