From cd03c52fd30d7caf57aaa38a7b32197e4d158ca2 Mon Sep 17 00:00:00 2001 From: Eve Date: Fri, 12 May 2023 13:37:15 +0100 Subject: [PATCH] Linux: Update linux.vmayarascan to use task.mm.get_vma_iter() which means it will work on linux kernels 6.1 and above --- volatility3/framework/plugins/linux/vmayarascan.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility3/framework/plugins/linux/vmayarascan.py b/volatility3/framework/plugins/linux/vmayarascan.py index 8e4174c12..eda0d7dca 100644 --- a/volatility3/framework/plugins/linux/vmayarascan.py +++ b/volatility3/framework/plugins/linux/vmayarascan.py @@ -96,7 +96,7 @@ class VmaYaraScan(interfaces.plugins.PluginInterface): An iterable of tuples containing start and end addresses for each descriptor """ if task.mm: - for vma in task.mm.get_mmap_iter(): + for vma in task.mm.get_vma_iter(): vm_size = vma.vm_end - vma.vm_start yield (vma.vm_start, vm_size)