mirror of
https://github.com/volatilityfoundation/volatility3.git
synced 2026-08-30 11:49:42 +02:00
Linux: Psscan check parent pointer is valid
This commit is contained in:
@@ -52,7 +52,10 @@ class PsScan(interfaces.plugins.PluginInterface):
|
||||
"""
|
||||
pid = task.tgid
|
||||
tid = task.pid
|
||||
ppid = task.parent.tgid if task.parent else 0
|
||||
ppid = 0
|
||||
|
||||
if task.parent.is_readable():
|
||||
ppid = task.parent.tgid
|
||||
name = utility.array_to_string(task.comm)
|
||||
exit_state = DescExitStateEnum(task.exit_state).name
|
||||
|
||||
|
||||
Reference in New Issue
Block a user