From cbd40db0537aff7a27fcf9e6e4bdae13329ab16c Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Tue, 28 Jul 2020 16:53:24 +0100 Subject: [PATCH] Linux: Restore accidentally dropped kobject definition --- .../framework/symbols/linux/extensions/__init__.py | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/volatility/framework/symbols/linux/extensions/__init__.py b/volatility/framework/symbols/linux/extensions/__init__.py index f9d485096..fda7700dd 100644 --- a/volatility/framework/symbols/linux/extensions/__init__.py +++ b/volatility/framework/symbols/linux/extensions/__init__.py @@ -503,3 +503,15 @@ class vfsmount(objects.StructType): def get_mnt_root(self): return self.mnt_root + + +class kobject(objects.StructType): + + def reference_count(self): + refcnt = self.kref.refcount + if self.has_member("counter"): + ret = refcnt.counter + else: + ret = refcnt.refs.counter + + return ret