WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-30 21:44:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

Context Typo Error, MFT Symbol JSON Prettier

Browse Source
This commit is contained in:
Donghyun Kim
2022-03-05 16:27:07 +09:00
parent 6cb2b2bf84
commit ad1ef807e7
3 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/contexts/__init__.py
+1 -1
View File
@@ -141,7 +141,7 @@ class Context(interfaces.context.ContextInterface):
layer_name: The layer within the context in which the module exists
offset: The offset at which the module exists in the layer
native_layer_name: The default native layer for objects constructed by the module
size: The size, in bytes, that the module occupys from offset location within the layer named layer_name
size: The size, in bytes, that the module occupies from offset location within the layer named layer_name
"""
if size:
return SizedModule.create(self,
volatility3/framework/interfaces/context.py
+1 -1
View File
@@ -129,7 +129,7 @@ class ContextInterface(metaclass = ABCMeta):
layer_name: The layer the module is associated with (which layer the module lives within)
offset: The initial/base offset of the module (used as the offset for relative symbols)
native_layer_name: The default native_layer_name to use when the module constructs objects
size: The size, in bytes, that the module occupys from offset location within the layer named layer_name
size: The size, in bytes, that the module occupies from offset location within the layer named layer_name
Returns:
A module object
volatility3/framework/symbols/windows/mft.json
+4 -2
View File
@@ -270,7 +270,8 @@
"offset": 8,
"type": {
"kind": "base",
"name": "unsigned char" }
"name": "unsigned char"
}
},
"NameLength": {
"offset": 9,
@@ -322,7 +323,8 @@
"offset": 8,
"type": {
"kind": "base",
"name": "unsigned short" }
"name": "unsigned short"
}
}
},
"kind": "struct",