WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-08-29 19:29:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

Move symbol catching to generator

Browse Source
This commit is contained in:
Andrew Case
2020-01-03 17:50:06 +00:00
committed by ikelos
parent 65556a2c92
commit a66e1bb6c2
1 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/plugins/linux/lsmod.py
+10 -9
View File
@@ -47,11 +47,8 @@ class Lsmod(plugins.PluginInterface):
vmlinux = contexts.Module(context, vmlinux_symbols, layer_name, 0)
try:
vmlinux.get_type("module")
except exceptions.SymbolError:
vollog.debug("The required symbol 'module' is not present in symbol table. Please check that kernel modules are enabled for the system under analysis.")
return
# this will cause an exception if module support is not compiled into the kernel
vmlinux.get_type("module")
modules = vmlinux.object_from_symbol(symbol_name = "modules").cast("list_head")
@@ -61,13 +58,17 @@ class Lsmod(plugins.PluginInterface):
yield module
def _generator(self):
for module in self.list_modules(self.context, self.config['primary'], self.config['vmlinux']):
try:
for module in self.list_modules(self.context, self.config['primary'], self.config['vmlinux']):
mod_size = module.get_init_size() + module.get_core_size()
mod_size = module.get_init_size() + module.get_core_size()
mod_name = utility.array_to_string(module.name)
mod_name = utility.array_to_string(module.name)
yield 0, (format_hints.Hex(module.vol.offset), mod_name, mod_size)
yield 0, (format_hints.Hex(module.vol.offset), mod_name, mod_size)
except exceptions.SymbolError:
vollog.debug("The required symbol 'module' is not present in symbol table. Please check that kernel modules are enabled for the system under analysis.")
def run(self):
return renderers.TreeGrid([("Offset", format_hints.Hex), ("Name", str), ("Size", int)], self._generator())